last executing test programs: 28.089434143s ago: executing program 32 (id=16): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 26.55133508s ago: executing program 5 (id=27): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_io_uring_setup(0x746e, &(0x7f0000000300)={0x0, 0x69e8, 0x40, 0x1, 0x800}, &(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) r5 = mmap$IORING_OFF_PBUF_RING(0x0, 0x194b, 0x0, 0x4000010, 0xffffffffffffffff, 0x8205fb1c) syz_io_uring_complete(r3, r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) fstatfs(r6, 0x0) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x200004, 0x200, 0x4, 0x4, 0x0, 0x7, 0xc4, 0x1, 0xff, 0x6, 0xc, 0x8, 0x1}, {0x8, 0xaef2, 0x6, 0xc, 0xc, 0x1, 0x8, 0x3, 0x0, 0x13, 0x1, 0x6, 0x7}, {0xffffd, 0x6, 0xc, 0xf, 0x3, 0x5, 0x0, 0xfb, 0x72, 0x15, 0x1, 0x3, 0x2}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x167a, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x2011c0}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000002c0)=0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000180)="0fc79edc9e363e0f2212bad104ed0f20c06635200000000f22c00f1660d466b9800000c00f326635000100000f30c1b9770df70f205d0f0636f3670f0f3e8a", 0x3f}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.394461472s ago: executing program 5 (id=30): syz_usb_connect(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003327ea720950b207779657f0199685ed74ac067a36e9d683cf09159cb9bb5164d138508010203010902480001d702d0790904cb0f060324020509050502400018020109050810000409050109050b0c400005021109050f0100040b070d09050e000004080658467553a254643bc86d13ee8535c80adee57d890424a2cefdd602676a5f13467c5e59f96dfb0dfdd1a893951c07615a2244074bab56d4ebf114d628887b59802486945978bc6800c183d4ed763e3e7e292bc1"], &(0x7f0000001a80)={0x0, 0x0, 0x41, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000340)=""/173, 0x35, 0xad, 0x1, 0x3, 0x10000}, 0x28) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000004c0)='bpf_lsm_bpf_prog_alloc_security\x00') pipe(&(0x7f0000000500)={0xffffffffffffffff}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x561640, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pB \x00'}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x0, 0x2, 0x3, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0x2, 0x0, 0x5, 0xfffffffffffffffc, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x58}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x0, 0xa, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000240)='GPL\x00', 0x4, 0x60, &(0x7f0000000280)=""/96, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xd, 0x3, 0x3a2}, 0x10, r2, 0x0, 0x5, &(0x7f0000000700)=[r3, r4, 0x1, r5, 0xffffffffffffffff, 0x1, r6, r7, r8], &(0x7f0000000740)=[{0x3, 0x2, 0x0, 0x9}, {0x4, 0x2, 0xe, 0x7}, {0x5, 0x4, 0x6}, {0x4, 0x4, 0xb, 0x1}, {0x4, 0x2, 0x7, 0x9}], 0x10, 0x80000000}, 0x94) 25.964732273s ago: executing program 33 (id=32): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000000c0)="1ff0d2aab9d446c447c7506e0de79ba62a100f82f8960e74615a1f916286f2292773c9911ad463bfc8", 0x29) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x7, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) 23.224693197s ago: executing program 34 (id=69): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000070000000300000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000711048000000000066000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 23.220739887s ago: executing program 5 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) unshare(0x64000600) socket(0xa, 0x3, 0x87) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) (async) write(r3, &(0x7f0000000240)='1', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x4, 0x1, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x64, 0x0, 0x1c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0x1f, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @broadcast, @broadcast]}]}}}}}) 23.046540261s ago: executing program 5 (id=76): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,iocharset=cp1251,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESOCT=0x0, @ANYBLOB="2dfd"], 0x1, 0x1535, &(0x7f0000001380)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r2, &(0x7f0000003cc0)=""/4128, 0x1020) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000001780)=0x10001, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd61fbddf000083aff00000000000000000000ffffac1e0001ff0200000000000000000000000000018100907800020004"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd0d, &(0x7f0000000000)="040000") recvmsg(r3, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x100) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x1, 0xb, 0x3ff, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x8001, 0x801001a, 0x866d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x8000000, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x8, 0xb, 0x77, 0x10000, 0x2000, 0x8, r6, r7, 0x5, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000001c0)='./dev/mapper/control\x00', &(0x7f0000000200), 0x802, &(0x7f00000005c0)={[{@redirect_dir_nofollow}, {@metacopy_off}, {@workdir={'workdir', 0x3d, './dev'}}, {@redirect_dir_follow}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@verity_on}, {@metacopy_on}, {@redirect_dir_on}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x0, 0xbd6a027aad7fdb60, 0x61, 0x0, 0x61, 0x39, 0x66], 0x2d, [0x39, 0x30, 0x66, 0x31], 0x2d, [0x31, 0x62, 0x39, 0x30], 0x2d, [0x38, 0x64, 0x66, 0x65], 0x2d, [0x30, 0x34, 0x31, 0x64, 0x64, 0x33, 0x65, 0x65]}}}, {@uid_gt={'uid>', r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+[,'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'exfat\x00'}}, {@obj_type={'obj_type', 0x3d, 'devtmpfs\x00'}}]}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff09058202000000010009050302", @ANYRESOCT], 0x0) 22.502424104s ago: executing program 0 (id=82): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400480, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r1, 0x4018aee1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44014) 22.172064751s ago: executing program 0 (id=85): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x100) syz_clone3(&(0x7f0000000440)={0x8001000, 0x0, 0x0, &(0x7f0000000140), {0x3f}, &(0x7f0000000200)=""/219, 0xdb, 0x0, 0x0}, 0x58) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) 22.036342325s ago: executing program 0 (id=87): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) fcntl$setstatus(r1, 0x4, 0x42400) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x10}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 21.969475986s ago: executing program 0 (id=88): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") close(0x3) socket$inet6(0xa, 0x802, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d7ffe199605000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r1, @ANYRESOCT], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000480)='\a\x00=', 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r2) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 20.50845875s ago: executing program 0 (id=99): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x801c, &(0x7f00000000c0)=ANY=[@ANYBLOB="63616368655f73747261746567793d64697361626c65642c757365525f78617474722c6461783d616c776179732cd0bedb3300"], 0x1, 0x1aa, &(0x7f0000000380)="$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") 19.864752145s ago: executing program 6 (id=103): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000140)}, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000480)={@void, @void, @eth={@broadcast, @random="3865333ff81e", @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x33, 0xff, @private2={0xfc, 0x2, '\x00', 0x4}, @local}}}}}, 0x3e) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x5) shutdown(r8, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010005b8e00000000000020007a000000", @ANYRES32=0x0, @ANYBLOB="000000000e2c0000280012800b000100697036746e6c000018000280140003002001000000000000000000000000000208000400bf010000"], 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) (async) sendmsg$sock(r0, &(0x7f0000001a00)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000100)="3ee7435b7c7c897c2733c68c686272c93a674b8ef1ffe60bcd22ed5e184472f00f5db8a08dc23b66212f61d6672941e98b1820e3137782b80a401e76ee1cdf9955626f42527553e6a70ade42737bfa0b5d367c80dee2c4abec2e2c2f683ce5f3d50b2db67d9ec730884bece0e3abddbf1cf764b209b4ec74f5d492340c77d04d15f15cc49d6996ef129567cba9feb55acddb0efc2b52ce5c9ce64db0dd761f16dc03862793fbba24f24fc6436da1a7befdae27d3ea8aea41ece841970361300671", 0xc1}, {&(0x7f0000000200)="58521208562335eaacd849e220a083f6439dbd2a86283b71e9cb3206304941b4cd6e1313c134af93bb27ceaae88665c5f56c6bcdc90c8200d98ade5274df27a7a79d333ecc5ab778f1aeb968ffc51af9a38001e0a9aebb4fbd8a1fb44c18e780cf57ba7235c4110e9bada03d78b084c8c2dc1885db2d204105c4ac159748132d46fac18822bb5639b306fabda101", 0x8e}, {&(0x7f00000002c0)="b581a4bd41e2f9760af251396da1c6bdb00c921e33e86943ca3fb03bfcfe50d38a276bb58124b95a509333f121ec69b9d3d9f573c0d703caf3b0fcecf7e81392c3155ec68a80e363a5a44b3d2a9f1d2d871407224fa0db1ffdbe65596b5f75d26db2fba0a960a2ae25e593b5b295e7919030bdfc68c088326d38b05b1952966c93b0eab3e7bd166ec8e4e1977b92fa176aa8d52f9c9972741b", 0x99}, {&(0x7f0000000380)="f01189b9e544ebe3dbdc2c056186e306d2997f2824053aeb84d44a282b47f0c5f5246a35514d25b1c89fc67ab82a8b57b44bc7fa43c6dd2e5102241bc131e884a1d7fba337d28dcdba41961295ac", 0x4e}, {&(0x7f0000000400)="c73df03f18d87fafaf06092e80a981ac2c92c849257b23bd88cc5059c738a4e55ceed02332a8", 0x26}, {&(0x7f0000000980)="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", 0x1000}], 0x6}, 0x4000000) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket(0x10, 0x3, 0x0) 19.815176286s ago: executing program 6 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711836000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000010401010061060000000000400000000500010002dcbf0ee2989fd365ed6b6bb8fd6c0fcc998593e10b317347b6aa7d480d9e888d7016cf945ebb8bc7c05cef5f476751ae65fcacfa9538a3a55a2bd1686607b05d30030f0fecbe3e5e20baba6474e12ac2b4fc27b0b2e9955c1eee647e3e57ba127a0b1e51662f2fc8a0d62f89eeddeec459f1922326d7edc8fd8865fca33d02b0ae6eb6a05e2a3cffb1916f1e0928c9984037193394d568491e088cf1efefeb7102ae804cb4afcbaa34869a8ba3d4b0", @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4031}, 0x20008888) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_ptrace_traceme\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000180)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x5, 0x70, 0x8}, 0x10, r5, r4, 0x4, &(0x7f0000000580)=[r6], &(0x7f00000005c0)=[{0x2, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x9, 0x3}, {0x1, 0x4, 0x9, 0xb}, {0x1, 0x4, 0x8}], 0x10, 0x1}, 0x94) 19.763085968s ago: executing program 35 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711836000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000010401010061060000000000400000000500010002dcbf0ee2989fd365ed6b6bb8fd6c0fcc998593e10b317347b6aa7d480d9e888d7016cf945ebb8bc7c05cef5f476751ae65fcacfa9538a3a55a2bd1686607b05d30030f0fecbe3e5e20baba6474e12ac2b4fc27b0b2e9955c1eee647e3e57ba127a0b1e51662f2fc8a0d62f89eeddeec459f1922326d7edc8fd8865fca33d02b0ae6eb6a05e2a3cffb1916f1e0928c9984037193394d568491e088cf1efefeb7102ae804cb4afcbaa34869a8ba3d4b0", @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4031}, 0x20008888) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000400)='bpf_lsm_ptrace_traceme\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000180)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x5, 0x70, 0x8}, 0x10, r5, r4, 0x4, &(0x7f0000000580)=[r6], &(0x7f00000005c0)=[{0x2, 0x2, 0x6, 0x3}, {0x5, 0x5, 0x9, 0x3}, {0x1, 0x4, 0x9, 0xb}, {0x1, 0x4, 0x8}], 0x10, 0x1}, 0x94) 19.721619359s ago: executing program 7 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180400001700020000000000ef000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180400001700020000000000ef000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 19.721354839s ago: executing program 5 (id=107): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x1b}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1040}], 0x0, 0x0, 0x0}) 19.719733079s ago: executing program 7 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x6, 0x3}, &(0x7f0000000000)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r4, r5, 0x0, r6, &(0x7f0000000440)={0x2e, 0x7f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0xd4fa9d535c6c7ba6, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x14, 0xd1f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, 0x0, 0x0, 0x0, &(0x7f0000000100)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f00, 0x1, 0x1000000, 0x33d, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25ab, 0x20, 0x0, 0x21f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x2, 0xfffffffd, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x2, 0xfffffdff}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f00, 0x1, 0x1000000, 0x33d, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25ab, 0x20, 0x0, 0x21f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x2, 0xfffffffd, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x2, 0xfffffdff}}], 0x1, 0x0, 0x0) chown(&(0x7f0000000100)='./file0\x00', r2, 0xee01) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21c91c, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid={'resgid', 0x3d, r3}, 0x32}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@euid_lt={'euid<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@uid_lt={'uid<', r2}}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21c91c, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid={'resgid', 0x3d, r3}, 0x32}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@euid_lt={'euid<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@uid_lt={'uid<', r2}}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 19.65435135s ago: executing program 7 (id=109): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r0, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000003c0)="012795", 0x3}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(0xffffffffffffffff, 0x0, 0x13) (async) madvise(0xffffffffffffffff, 0x0, 0x13) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) (async) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000018010004786c6c2500000000002020207b1af8ff000063b2b0ed7554ab6b000007010000f8ffffffb702000008000000b703000000000000850000007200000085000000230000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006d"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) 19.555101032s ago: executing program 5 (id=110): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) (async) splice(r3, 0x0, r1, 0x0, 0x1000, 0x0) (async) splice(r3, 0x0, r1, 0x0, 0x7d, 0x8) 19.503106194s ago: executing program 36 (id=110): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) (async) splice(r3, 0x0, r1, 0x0, 0x1000, 0x0) (async) splice(r3, 0x0, r1, 0x0, 0x7d, 0x8) 18.885102419s ago: executing program 7 (id=113): syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{@fmask={'fmask', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_remount}, {@namecase}, {@namecase}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@discard}, {}], [{@uid_eq}, {@hash}, {@uid_eq}, {@flag='dirsync'}, {@appraise}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33) 17.95678232s ago: executing program 7 (id=119): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x1b}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1040}], 0x0, 0x0, 0x0}) 17.854502572s ago: executing program 7 (id=121): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @mcast2, @mcast1, 0x80, 0x700, 0x0, 0x20000000}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='oom_score_adj < 10', 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read(r0, &(0x7f00000002c0)=""/148, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800005, 0x31, r0, 0xd0fbb000) 17.761624034s ago: executing program 37 (id=121): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f42000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @mcast2, @mcast1, 0x80, 0x700, 0x0, 0x20000000}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='oom_score_adj < 10', 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read(r0, &(0x7f00000002c0)=""/148, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800005, 0x31, r0, 0xd0fbb000) 16.469029675s ago: executing program 9 (id=111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112b2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000045) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r4, &(0x7f0000000040)="e230150c44daeb8b9dfec5d1b1b5ff160c02f8abe787605cba7bfe2d5284d42434acaeb7b18ffa4cc06261cea8ee7e883336812941714d7d8930d5b05e", &(0x7f0000000080)=""/79, 0x4}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fsync(0xffffffffffffffff) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x1346, &(0x7f00000002c0)=ANY=[], 0x0) 16.465042305s ago: executing program 9 (id=128): syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000000c0)={[{@fmask={'fmask', 0x3d, 0x7}}, {@dmask={'dmask', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_remount}, {@namecase}, {@namecase}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@discard}, {}], [{@uid_eq}, {@hash}, {@uid_eq}, {@flag='dirsync'}, {@appraise}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33) 16.299059779s ago: executing program 8 (id=105): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = dup(r2) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) dup(r2) (async) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) 15.538812187s ago: executing program 9 (id=130): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x4c) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x15, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000040)={0x0, 0xbf, 0x2000, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa5, 0x2, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbcf, 0x2000, 0x3, 0x800002b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 15.401493s ago: executing program 9 (id=131): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x8, 0x64, 0xd, 0x8, 0x1b3d, 0x1a8, 0x7c5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xce, 0xc0, 0x15, "", [{{0x9, 0x4, 0x67, 0x5, 0x2, 0xe2, 0x0, 0x8d, 0x3, [], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x1, 0xff, 0xa}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xc, 0x0, 0x32}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80c}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_rr_get_interval(r0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = getpgid(0x0) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0xce96}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) unshare(0x40000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, r6, 0x731, 0x100000, 0x8000, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r7 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r7, 0x1, 0x6, 0x0, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0xffdf, @remote}, 0x10) 15.308567392s ago: executing program 38 (id=131): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x8, 0x64, 0xd, 0x8, 0x1b3d, 0x1a8, 0x7c5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xce, 0xc0, 0x15, "", [{{0x9, 0x4, 0x67, 0x5, 0x2, 0xe2, 0x0, 0x8d, 0x3, [], [{{0x9, 0x5, 0x6, 0x3, 0x8, 0x1, 0xff, 0xa}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xc, 0x0, 0x32}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80c}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_rr_get_interval(r0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = getpgid(0x0) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0xce96}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) unshare(0x40000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, r6, 0x731, 0x100000, 0x8000, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r7 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r7, 0x1, 0x6, 0x0, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0xffdf, @remote}, 0x10) 14.904819071s ago: executing program 0 (id=134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7098077aa43a1ddd8710080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4004000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getdents64(r2, &(0x7f0000000140)=""/71, 0x47) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 14.839237913s ago: executing program 39 (id=134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7098077aa43a1ddd8710080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4004000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getdents64(r2, &(0x7f0000000140)=""/71, 0x47) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 2.143801299s ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x10100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0xe2, 0x6, @broadcast}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r4}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@local, r4}, 0x14) 2.061121941s ago: executing program 3 (id=253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000ffff7f000001040012000500160001"], 0x60}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000084e41f13bc0000000164010100000000000000000000000000ffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000240700000000000000014000e00fc010000000000000000000000000001"], 0x104}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r1, 0x0, 0x0, 0x4048000, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r4 = socket(0x2, 0x3, 0xff) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x60, 0x0, 0x4, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) 2.019184353s ago: executing program 3 (id=256): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x184) (async) syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020351204804000010203010902a2000301ff0010080b0005010130070904000000010130000a2401053e02120d00001424020200040107ff0f0000fcff800000105e00132403050204050402510e00000100060001000d240a0401030000000300000009040100000102300009040101010102300009050109000240d2010a252506000000010400090402000001023000090402010101023000090582090002080a050a2525fdffffff850e00"], 0x0) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x7, 0x8, 0x22}, 0x50) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) (async) recvmmsg(r2, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/66, 0x42}, 0x7}], 0x1, 0x40000002, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000ffff950000000000000011ec0deb1d08c3c1c5f8c30080000000000000746993e8fda6b62e162bc73f19463a4ffe43fd1f91658b92e011e13cf65e0d6b312e2d91d8ea6f60c89733cfd82f6104ec2771802a3cf7812d9ca45ff414f041fbb3f90a418f72a3858966bbc462a2aaf37fc4e3b13fbf24"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) close(r4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x4}, 0x1c) shutdown(r5, 0x1) (async) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r4}, 0x20) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102100708267dfec2e7cd"], 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0xfff, 0x6800) 1.645176171s ago: executing program 1 (id=265): mmap$IORING_OFF_SQES(0x0, 0x6, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.643319351s ago: executing program 4 (id=266): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) write$UHID_INPUT2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000006e210"], 0xd) syz_open_dev$tty1(0xc, 0x4, 0x4) 1.623180691s ago: executing program 1 (id=267): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r2, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa062b}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r10, r9, &(0x7f0000000180)={0x0, 0x80001, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000006, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.566612983s ago: executing program 4 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x1b}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1040}], 0x0, 0x0, 0x0}) 1.565506043s ago: executing program 1 (id=269): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setresuid(r1, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x207, &(0x7f00000000c0)={[{@journal_checksum}, {@nolazytime}], [{@uid_gt={'uid>', r3}}]}, 0x1, 0x469, &(0x7f0000000a80)="$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") 1.564623243s ago: executing program 1 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x68000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x8, 0x8}) syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000401e0448304000010203010902a200030101c010080b0001010130070904000000010130000a2401103e00070000000d240704030c0000000c00000014240203050203030500000009008b00d7019500132403010204030504dd"], 0x0) 1.564213053s ago: executing program 4 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@perf_event={0xf346}}, 0x18) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'macsec0\x00', 0x5}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000740)=""/80, &(0x7f0000000480)=""/61, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000001640)={'macvlan0\x00', 0x1611b36b35ec3b86}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', r1, 0x4000, r1}, 0x18) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200580e4) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'gretap0\x00', 'lo\x00', {0xff}, {0xff}, 0x84, 0x3, 0x1}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x42, 0x4, 0xfffffff9, 0x29568e77, 0x3, 0x78}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x40, 0x0, "fd6f5c18d0262a33b369b43e0023ce224f3cf3907d89567315c627911001"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x300}]}}}]}, 0x3c}}, 0x0) 1.421407436s ago: executing program 4 (id=272): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x802440, 0x0) (async) mkdir(0x0, 0x1ff) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0xffffffffffffffff) kcmp(r0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) (async, rerun: 32) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) (rerun: 32) ftruncate(r3, 0x2007ffc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) sendfile(r3, r3, 0x0, 0x2000000000006) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000006200)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffa}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)}}], 0x2, 0x20080058) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x12) (rerun: 32) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.343752528s ago: executing program 4 (id=273): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) (fail_nth: 25) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.307744669s ago: executing program 4 (id=274): r0 = userfaultfd(0x80001) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1a5}) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0x3, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x1, 0x88}}}}}]}}]}}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.117184354s ago: executing program 40 (id=105): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = dup(r2) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) dup(r2) (async) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) 1.115330923s ago: executing program 2 (id=278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd80, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x1100}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000660a020000000000180100002020782500000000002020207b1a050000000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0xd) (async) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000ae8d00000000000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000200"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000008000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003080)={&(0x7f0000000300)="f63b3972111af8ae686fe9032abd5a551c9dd66821300613b865d041b40f109d9dd04bbce77c0e207f3f0027b6522470782176a663027237eef250d7bbba6dfcd04a14d513b1c51958e02d2b751d1d75dc30382def6f17622aa9f16c5838a1acc9d6519fab3fd72d5c8aa214f714ff156dac6bbed0b20fdec3e3d850627c5fc71a5b1fac00668e24d1fb27ec70b8d2dbbffc0eb874e206e91a354de45be86555dab640448b05a32e833b5ccbd1046185abe52892fffdcc3f85fd40208b0b2212aac8cb72cf1f67fd8493d0edd1", &(0x7f0000001f80)=""/4096, &(0x7f0000002f80), &(0x7f0000003040), 0xffffffff, r3}, 0x38) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r6 = socket(0x1e, 0x4, 0x0) dup3(r4, r0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r5, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000182, 0x0) close(r6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000000200)) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f1360806004108790604dd8ddb12aaaaaa42ac14d73d8cab7e004e2aac1414bb"], 0x0) 984.602317ms ago: executing program 2 (id=279): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4, &(0x7f00000006c0)={[], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r5 = creat(&(0x7f0000000000)='./bus\x00', 0x39) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @fallback, r5, 0x6}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) connect$unix(r7, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="f7c8c7432e0b47dd603b05000000cb3ff24e99", @ANYRES64=r5], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], &(0x7f00000003c0)=""/143, 0x2d, 0x8f, 0x1}, 0x28) 708.085563ms ago: executing program 3 (id=280): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r2, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa062b}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r10, r9, &(0x7f0000000180)={0x0, 0x80001, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000006, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 586.826586ms ago: executing program 3 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x1b}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1040}], 0x0, 0x0, 0x0}) 487.266798ms ago: executing program 3 (id=282): getrusage(0xffffffffffffffff, 0x0) personality(0xfe47fef9f5ff7379) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="8000000000000000", 0x8, 0x20048890, &(0x7f0000000040)={0xa, 0x4e21, 0x2000c9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202000200039f02070503"], 0x0) r1 = syz_clone(0x300c000, &(0x7f0000000000)="2432db86d9d11cbc0aa0626a6240aa69de2077aeaf830300fe8711120e31fea439d394dad574c02d21ad5fe448c75685151289cac49ff3de1120301e1b46f78a7ec8ce977fa57b4c8a", 0x49, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="d758b72d8d303ddecc994abb59a071e2040fc91d600ea9bcc70af7d453d181c7c53389fda94e79d3f1be4b33") wait4(r1, &(0x7f0000000180), 0x1, 0x0) (async) wait4(r1, &(0x7f0000000180), 0x1, 0x0) gettid() (async) gettid() syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 216.172004ms ago: executing program 6 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000380)=0x9, 0x4) write(r1, &(0x7f0000001b40)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xa, 0x8440) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x181101) lseek(r2, 0xfffffffffffffff5, 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) sendto(r1, &(0x7f00000005c0)="120000001200e706017b00000000000000a1", 0x12, 0x240048d0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/94, 0x5e}, 0xa}], 0x1, 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x58}}, 0x40080) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 4.63724ms ago: executing program 2 (id=283): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x70bd2d, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f00000012c0), 0x0}) 4.27992ms ago: executing program 2 (id=284): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="b800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028002f80090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff0700000800290007c7020060001a8096"], 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.75586ms ago: executing program 6 (id=285): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) (fail_nth: 26) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.30115ms ago: executing program 6 (id=286): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000580)={0x7, 0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000480)}], &(0x7f0000000540)=[0xba]}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 952.069µs ago: executing program 2 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x34044010}, 0x4008000) 736.84µs ago: executing program 6 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xc13}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x97}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2f0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x7, @val=0x4, @val=0x35, @val="f2716fcfe9d744b10300b7d85d948e60"}}, @challenge={0x10, 0x1, 0x4d}, @preq={0x82, 0x83, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x3, 0xd, 0x338, @device_a, 0x6, @value=@broadcast, 0x9, 0x9b7e, 0x9, [{{0x1}, @device_b, 0x80000001}, {{0x1}, @broadcast, 0x7fffffff}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{}, @device_a, 0x5}, {{}, @device_b, 0x8001}, {{0x1}, @broadcast, 0x6}, {{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0x5fbf}]}}]}, @NL80211_ATTR_IE={0x217, 0x2a, [@mic={0x8c, 0x18, {0x241, "143d75cae564", @long="a2800a331d70270df564cb6d834244f3"}}, @random={0x2, 0x50, "420494fcec31fb5e5a2c6cceee9a0f25964b0ee4cb963480cffc2e22a0449f4dbafba15223f554c39a96dc5d57fd7bfa3c05335559aa04a40e98145584599a588ef92ce508498191da3e17a769f4cf76"}, @random_vendor={0xdd, 0xae, "3c864af5a5c4818f4fbea1366563d6089a6099baf47f49d33e9be6ce288829f401a3ec1dcd84db8fac7970fa3cb78e37c61d81e48c02809ea4687b0f5ead7873a2343db77e2c93d30706d7a3079eb522f7346e1c2ab2ec75b9b1384e5f54307e3be3f9b9b53420bfe11e07d39742c44b6a1b494973a6a208ea0e6ba26c988792f4d94ba1e2419b2335b38e7bbccc938a6cf1cb696a1814435112c817fb33e02116369afc0c5e5ac9b3b262164fbb"}, @random={0x4, 0x8e, "f8e1901f372eb6c29425bbd6afec3c63f673da0101b38877f86d343f210a8a530dd8f3eea85135e629290b8f3a5be2cfcfc6cc64d181b63655118262389df977a79672db38b241e9bb8f1c314e42ac991bcfb5bb9c074a921bef4e2d92be12bb8cf3a3067f89a73320871fb45da4951d8f137c23e1ac2ebc0c7b6eea5827ed1619af31ec24b6ecbb80822709c2bb"}, @measure_req={0x26, 0x1b, {0x2, 0x81, 0xfb, "2c1ed102600002009e4d98c0f93f847adf4e3d6c80e0fcbb"}}, @random_vendor={0xdd, 0x48, "626e3706ec546f5c5c28490e4a7067e01220bf2c958b9091861929fa2c4b654bcb398c844412d603cde61a5091dd7c87eac03ca9fc3a29c45cb0213d0d6ab2a4fefc9dc6e8863392"}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x84, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x974}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x240048c0}, 0x0) 442.54µs ago: executing program 2 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0xc7f, 0x3, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x80000001, 0x6}}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xe, 0xf}, {0x2, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x200400c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0xc00, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r2, 0x4111c000) read(r3, &(0x7f0000001000)=""/8192, 0x2000) 182.069µs ago: executing program 1 (id=290): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x200003, {0x0, 0x0, 0x0, r2, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa062b}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0x80001, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000006, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 0s ago: executing program 1 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x2, 0x1b}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x4, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1040}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 000206 ORIG_RAX: 00000000000001a9 [ 29.268004][ T481] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fe112d9e0d9 [ 29.275975][ T481] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 29.283947][ T481] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 29.291915][ T481] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 29.299884][ T481] R13: 0000000000000090 R14: 00007fe113d06fd8 R15: 0000000000000000 [ 29.307888][ T481] [ 29.315573][ T482] netlink: 'syz.0.45': attribute type 15 has an invalid length. [ 29.325526][ T479] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.327459][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 29.340582][ T479] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.33: bad orphan inode 13 [ 29.354984][ T43] device bridge_slave_1 left promiscuous mode [ 29.361258][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.368854][ T479] ext4_test_bit(bit=12, block=18) = 1 [ 29.374294][ T479] is_bad_inode(inode)=0 [ 29.378866][ T60] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 29.384355][ T479] NEXT_ORPHAN(inode)=0 [ 29.390112][ T492] binder: 491:492 ioctl c0306201 200000000080 returned -14 [ 29.391034][ T43] device bridge_slave_0 left promiscuous mode [ 29.398645][ T479] max_ino=32 [ 29.403903][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.407310][ T492] binder: 491:492 ioctl c0306201 2000000003c0 returned -14 [ 29.414734][ T479] i_nlink=1 [ 29.423718][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 29.425866][ T479] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 29.435879][ T60] usb 6-1: not running at top speed; connect to a high speed hub [ 29.449337][ T43] device veth1_macvtap left promiscuous mode [ 29.455394][ T43] device veth0_vlan left promiscuous mode [ 29.478466][ T60] usb 6-1: too many configurations: 104, using maximum allowed: 8 [ 29.487556][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 29.495424][ T60] usb 6-1: can't read configurations, error -61 [ 29.571812][ T493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 29.582118][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 29.582133][ T500] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 29.608657][ T500] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.33: bg 0: block 248: padding at end of block bitmap is not set [ 29.623719][ T500] EXT4-fs error (device loop6): ext4_acquire_dquot:6828: comm syz.6.33: Failed to acquire dquot type 1 [ 29.638030][ T500] syz.6.33 (500) used greatest stack depth: 20928 bytes left [ 29.646954][ T429] EXT4-fs (loop6): unmounting filesystem. [ 29.648499][ T60] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 29.690378][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 29.692106][ T507] IPv6: A: Disabled Multicast RS [ 29.708814][ T60] usb 6-1: not running at top speed; connect to a high speed hub [ 29.732779][ T60] usb 6-1: too many configurations: 104, using maximum allowed: 8 [ 29.737202][ T514] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.746887][ T515] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 29.760345][ T514] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.760463][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 29.776168][ T515] exfat filesystem being mounted at /9/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 29.782273][ T514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 29.787148][ T60] usb 6-1: can't read configurations, error -61 [ 29.805127][ T60] usb usb6-port1: unable to enumerate USB device [ 29.840868][ T518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.854940][ T518] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.56: EA inode hash validation failed [ 29.867733][ T518] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.881015][ T518] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.56: corrupted inode contents [ 29.893412][ T518] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 29.902564][ T518] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.56: corrupted inode contents [ 29.915849][ T518] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.56: mark_inode_dirty error [ 29.927309][ T518] EXT4-fs error (device loop1): ext4_free_inode:355: comm syz.1.56: bit already cleared for inode 11 [ 29.938483][ T518] EXT4-fs (loop1): 1 orphan inode deleted [ 29.944279][ T518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.957180][ T518] EXT4-fs error (device loop1): __ext4_iget:5104: inode #14: block 1886221359: comm syz.1.56: invalid block [ 29.975519][ T518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 29.984512][ T518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 30.010194][ T288] EXT4-fs (loop1): unmounting filesystem. [ 30.098566][ T60] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.152977][ T528] set_capacity_and_notify: 4 callbacks suppressed [ 30.152991][ T528] loop1: detected capacity change from 0 to 512 [ 30.166306][ T528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.173366][ T528] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 30.182818][ T528] EXT4-fs (loop1): 1 truncate cleaned up [ 30.188555][ T528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.197896][ T528] EXT4-fs (loop1): unmounting filesystem. [ 30.235971][ T533] binder: 532:533 ioctl c0306201 200000000080 returned -14 [ 30.244473][ T533] binder: 532:533 ioctl c0306201 2000000003c0 returned -14 [ 30.244907][ T535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 30.266895][ T535] loop1: detected capacity change from 0 to 128 [ 30.274431][ T535] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 30.279078][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 30.289512][ T535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.298694][ T535] ext2 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.299043][ T60] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 30.320465][ T60] usb 1-1: config 0 has no interface number 0 [ 30.326605][ T60] usb 1-1: config 0 interface 9 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 30.337327][ T60] usb 1-1: config 0 interface 9 has no altsetting 0 [ 30.351250][ T288] EXT4-fs (loop1): unmounting filesystem. [ 30.357587][ T60] usb 1-1: New USB device found, idVendor=0403, idProduct=f06f, bcdDevice=e4.b0 [ 30.366922][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.375011][ T60] usb 1-1: Product: syz [ 30.379604][ T60] usb 1-1: Manufacturer: syz [ 30.384273][ T60] usb 1-1: SerialNumber: syz [ 30.390776][ T60] usb 1-1: config 0 descriptor?? [ 30.426614][ T553] binder: 552:553 ioctl c018620c 200000000000 returned -22 [ 30.742612][ T558] syz.6.66 (558) used greatest stack depth: 19704 bytes left [ 30.783231][ T563] loop1: detected capacity change from 0 to 16 [ 30.799385][ T60] ftdi_sio 1-1:0.9: FTDI USB Serial Device converter detected [ 30.827793][ T60] ftdi_sio ttyUSB0: unknown device type: 0xe4b0 [ 30.838601][ T563] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.867954][ T60] usb 1-1: USB disconnect, device number 4 [ 30.911851][ T60] ftdi_sio 1-1:0.9: device disconnected [ 31.033794][ T572] binder: 567:572 ioctl c0306201 200000000080 returned -14 [ 31.062249][ T572] binder: 567:572 ioctl c0306201 2000000003c0 returned -14 [ 31.205545][ T583] loop5: detected capacity change from 0 to 256 [ 31.228589][ T587] capability: warning: `syz.6.78' uses deprecated v2 capabilities in a way that may be insecure [ 31.248684][ T583] exfat: Deprecated parameter 'namecase' [ 31.254492][ T583] exfat: Deprecated parameter 'namecase' [ 31.280506][ T583] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 31.288646][ T586] loop1: detected capacity change from 0 to 8192 [ 31.325549][ T583] exfat filesystem being mounted at /4/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 31.337021][ T5] device bridge_slave_1 left promiscuous mode [ 31.338247][ T586] loop1: p1 p2 [ 31.343411][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.348032][ T291] EXT4-fs (loop0): unmounting filesystem. [ 31.359986][ T5] device bridge_slave_0 left promiscuous mode [ 31.366398][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.370600][ T586] loop1: p1 start 16777216 is beyond EOD, truncated [ 31.380027][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 31.380041][ T28] audit: type=1400 audit(3934351898.594:345): avc: denied { write open } for pid=582 comm="syz.5.76" path=2F342FE91F7189591E9233614B2F627573 dev="loop5" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.405850][ T586] loop1: p2 size 515840 extends beyond EOD, [ 31.412164][ T28] audit: type=1400 audit(3934351898.594:346): avc: denied { mounton } for pid=582 comm="syz.5.76" path=2F342FE91F7189591E9233614B2F627573 dev="loop5" ino=1048620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.412363][ T5] device veth1_macvtap left promiscuous mode [ 31.427314][ T586] truncated [ 31.449573][ T5] device veth0_vlan left promiscuous mode [ 31.462827][ T583] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 31.477460][ T596] loop0: detected capacity change from 0 to 512 [ 31.496735][ T28] audit: type=1400 audit(3934351898.704:347): avc: denied { setopt } for pid=582 comm="syz.5.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.517243][ T28] audit: type=1400 audit(3934351898.724:348): avc: denied { bind } for pid=582 comm="syz.5.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.523749][ T596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 31.544505][ T596] System zones: 1-12 [ 31.545602][ T583] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 31.550218][ T28] audit: type=1400 audit(3934351898.724:349): avc: denied { name_bind } for pid=582 comm="syz.5.76" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 31.579264][ T28] audit: type=1400 audit(3934351898.754:350): avc: denied { node_bind } for pid=582 comm="syz.5.76" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 31.599858][ T596] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.80: missing EA_INODE flag [ 31.615053][ T583] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 31.625004][ T596] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.80: error while reading EA inode 12 err=-117 [ 31.638833][ T583] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 31.649344][ T596] EXT4-fs (loop0): 1 orphan inode deleted [ 31.655094][ T596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.657127][ T588] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.676360][ T588] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.693025][ T28] audit: type=1400 audit(3934351898.884:351): avc: denied { write } for pid=595 comm="syz.0.80" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.696721][ T588] device bridge_slave_0 entered promiscuous mode [ 31.716506][ T583] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 31.721802][ T588] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.738554][ T28] audit: type=1400 audit(3934351898.904:352): avc: denied { add_name } for pid=595 comm="syz.0.80" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.759031][ T28] audit: type=1400 audit(3934351898.904:353): avc: denied { setattr } for pid=595 comm="syz.0.80" name="work" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.781820][ T28] audit: type=1400 audit(3934351898.904:354): avc: denied { remove_name } for pid=595 comm="syz.0.80" name="#3" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.784088][ T291] EXT4-fs (loop0): unmounting filesystem. [ 31.805527][ T588] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.809384][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 31.817033][ T588] device bridge_slave_1 entered promiscuous mode [ 31.856789][ T601] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 31.898024][ T588] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.905121][ T588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.912406][ T588] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.919446][ T588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.938062][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.945387][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.953201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.961006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.970715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.979481][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.986551][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.005558][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 32.022370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.031561][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.035094][ T615] binder: 614:615 ioctl c0306201 200000000080 returned -14 [ 32.038639][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.049113][ T24] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 32.063050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.072808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.080495][ T615] binder: 614:615 ioctl c0306201 2000000003c0 returned -14 [ 32.080894][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.096484][ T613] netlink: 'syz.0.85': attribute type 16 has an invalid length. [ 32.097871][ T24] usb 2-1: Product: syz [ 32.106145][ T613] netlink: 'syz.0.85': attribute type 17 has an invalid length. [ 32.109793][ T24] usb 2-1: Manufacturer: syz [ 32.122102][ T24] usb 2-1: SerialNumber: syz [ 32.141717][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 32.149445][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 32.156777][ T613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 32.168459][ T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 32.180612][ T617] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 32.190391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.205223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 32.213528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.223164][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 32.231681][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.234240][ T622] loop0: detected capacity change from 0 to 512 [ 32.240363][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.254302][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.269771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.275524][ T622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.277878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.286761][ T622] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.294393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.315955][ T588] device veth0_vlan entered promiscuous mode [ 32.331144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.344104][ T588] device veth1_macvtap entered promiscuous mode [ 32.346704][ T24] usb 2-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 32.355017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.361326][ T24] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 32.376562][ T24] usb 2-1: USB disconnect, device number 3 [ 32.381755][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.398148][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 32.408752][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.430671][ T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 32.468446][ T19] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 32.478223][ T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 32.492516][ T19] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 32.523819][ T638] xt_hashlimit: size too large, truncated to 1048576 [ 32.588420][ T60] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.654945][ T640] loop1: detected capacity change from 0 to 128 [ 32.671113][ T640] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.687824][ T636] loop7: detected capacity change from 0 to 40427 [ 32.696242][ T640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.716442][ T640] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.755351][ T640] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.779994][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.799994][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.831472][ T60] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.858979][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.886609][ T60] usb 1-1: SerialNumber: syz [ 33.106216][ T622] process 'syz.0.88' launched './file0' with NULL argv: empty string added [ 33.123523][ T60] usb 1-1: 0:2 : does not exist [ 33.128730][ T60] usb 1-1: unit 5 not found! [ 33.140726][ T60] usb 1-1: USB disconnect, device number 5 [ 33.211154][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.220284][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 33.228289][ T19] usb 6-1: SerialNumber: syz [ 33.241420][ T601] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 33.245303][ T639] can0: slcan on ttyS3. [ 33.253387][ T19] cdc_acm 6-1:1.0: skipping garbage [ 33.259504][ T19] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 33.300356][ T657] sd 0:0:1:0: PR command failed: 1026 [ 33.305858][ T657] sd 0:0:1:0: Sense Key : 0x5 [current] [ 33.312001][ T637] can0 (unregistered): slcan off ttyS3. [ 33.318109][ T657] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 33.335098][ T660] binder: 659:660 ioctl c0306201 200000000080 returned -14 [ 33.351447][ T288] EXT4-fs (loop1): unmounting filesystem. [ 33.366757][ T660] binder: 659:660 ioctl c0306201 2000000003c0 returned -14 [ 33.441706][ T669] loop6: detected capacity change from 0 to 256 [ 33.449092][ T669] exfat: Deprecated parameter 'namecase' [ 33.454834][ T669] exfat: Deprecated parameter 'namecase' [ 33.465613][ T669] exfat: Deprecated parameter 'namecase' [ 33.479279][ T669] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 33.499737][ T669] exfat filesystem being mounted at /16/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 33.678545][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.754342][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 33.878652][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 33.886045][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.919501][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 33.932501][ T60] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.942528][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.962062][ T60] usb 2-1: Product: 궕ᱡê¢ç¹ê›–慬唬䖔넦ê‡ç¿é³’ë¶â±Šä¦µÃ®ã–¼ï¶ªæž»ë™“䙊苀ãžë¯¥ì»¿è©á†…⤧귿烨₻ﵬ峣漷䭉 [ 33.967248][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 33.975725][ T60] usb 2-1: Manufacturer: យ꯰헃焯翮ǻ貽誯ﵦ [ 34.001882][ T60] usb 2-1: SerialNumber: ဌ [ 34.008262][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.015978][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.029543][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.053986][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.084817][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.104549][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.112096][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.123675][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.144907][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.163949][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.167335][ T10] loop: Write error at byte offset 2, length 3584. [ 34.183824][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.190158][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 34.196567][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.205917][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 34.232505][ T60] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 34.232846][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.242186][ T60] usb 2-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 34.269319][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.287622][ T60] usb 2-1: failed to enable PITCH for EP 0x1 [ 34.297786][ T60] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.304302][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.316826][ T60] usb 2-1: USB disconnect, device number 4 [ 34.348168][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.357194][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.375020][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.396667][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 34.435752][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.464688][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.485391][ T19] usb 6-1: USB disconnect, device number 6 [ 34.502124][ T367] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 34.543082][ T367] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 34.566527][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.623642][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.658304][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.845549][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.876675][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.916163][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.925624][ T722] device bridge_slave_0 entered promiscuous mode [ 34.932289][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 34.965606][ T731] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 35.360105][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.367195][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.376856][ T722] device bridge_slave_1 entered promiscuous mode [ 35.377738][ T733] set_capacity_and_notify: 4 callbacks suppressed [ 35.377751][ T733] loop7: detected capacity change from 0 to 256 [ 35.396788][ T733] exfat: Deprecated parameter 'namecase' [ 35.402530][ T733] exfat: Deprecated parameter 'namecase' [ 35.408246][ T733] exfat: Deprecated parameter 'namecase' [ 35.420667][ T733] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 35.441589][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 35.452152][ T733] exfat filesystem being mounted at /10/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 35.462198][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 35.477752][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.499840][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 35.519710][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.528194][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.529082][ T736] loop1: detected capacity change from 0 to 4096 [ 35.536807][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.570553][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.579923][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.722238][ T736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.766413][ T736] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.871586][ T736] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 35.884944][ T736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.902969][ T736] syz.1.114[736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.904037][ T736] syz.1.114[736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.964013][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.982531][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.983503][ T288] EXT4-fs (loop1): unmounting filesystem. [ 35.990656][ T729] device bridge_slave_0 entered promiscuous mode [ 36.003489][ T10] device bridge_slave_1 left promiscuous mode [ 36.010088][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.025885][ T10] device bridge_slave_0 left promiscuous mode [ 36.033723][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.057044][ T10] device veth1_macvtap left promiscuous mode [ 36.069403][ T10] device veth0_vlan left promiscuous mode [ 36.119790][ T755] loop1: detected capacity change from 0 to 512 [ 36.134224][ T755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.147925][ T755] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 1803188595: comm syz.1.116: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 36.168804][ T755] EXT4-fs (loop1): mount failed [ 36.241317][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.250164][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.279218][ T729] device bridge_slave_1 entered promiscuous mode [ 36.415545][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.429017][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.462014][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.478828][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.495672][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.502779][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.704211][ T768] loop1: detected capacity change from 0 to 40427 [ 36.718578][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.726333][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.748877][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.756654][ T319] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.810558][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.826496][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.837145][ T768] loop1: detected capacity change from 0 to 256 [ 36.848622][ T768] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 36.861803][ T768] exfat filesystem being mounted at /32/bus/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 36.873165][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.880243][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.888604][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.897724][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.904665][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 36.904680][ T28] audit: type=1400 audit(3934351904.114:399): avc: denied { create } for pid=288 comm="syz-executor" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.906236][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.912117][ T28] audit: type=1400 audit(3934351904.114:400): avc: denied { link } for pid=288 comm="syz-executor" name="#10" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.932306][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.934494][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.968392][ T28] audit: type=1400 audit(3934351904.114:401): avc: denied { rename } for pid=288 comm="syz-executor" name="#11" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 36.973815][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.011986][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.024315][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.032674][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.041376][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.049965][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.058175][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.066446][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.075223][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.079067][ T28] audit: type=1400 audit(3934351904.294:402): avc: denied { mounton } for pid=772 comm="syz.1.124" path="/proc/109/task" dev="proc" ino=19718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 37.083889][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.112759][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.121522][ T729] device veth0_vlan entered promiscuous mode [ 37.128535][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.128802][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.129004][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.129220][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.129436][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.129693][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.129931][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.166920][ T722] device veth0_vlan entered promiscuous mode [ 37.198522][ T28] audit: type=1400 audit(3934351904.404:403): avc: denied { mount } for pid=772 comm="syz.1.124" name="/" dev="configfs" ino=10281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 37.230298][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.242727][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.253293][ T28] audit: type=1400 audit(3934351904.404:404): avc: denied { search } for pid=772 comm="syz.1.124" name="/" dev="configfs" ino=10281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.259656][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.278692][ T28] audit: type=1400 audit(3934351904.404:405): avc: denied { read } for pid=772 comm="syz.1.124" name="/" dev="configfs" ino=10281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.283283][ T291] EXT4-fs: 126 callbacks suppressed [ 37.283295][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.305415][ T28] audit: type=1400 audit(3934351904.404:406): avc: denied { open } for pid=772 comm="syz.1.124" path="/" dev="configfs" ino=10281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.310968][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.317703][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.353112][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.361525][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.372881][ T729] device veth1_macvtap entered promiscuous mode [ 37.381955][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.389215][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.402055][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.413958][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.425282][ T777] loop1: detected capacity change from 0 to 512 [ 37.434262][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.441278][ T777] EXT4-fs: test_dummy_encryption requires encrypt feature [ 37.449332][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.462330][ T722] device veth1_macvtap entered promiscuous mode [ 37.472369][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.480554][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.480780][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.487348][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.496108][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.511345][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.519443][ T28] audit: type=1400 audit(3934351904.714:407): avc: denied { read } for pid=776 comm="syz.1.125" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.540316][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.548861][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.557140][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.558899][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.572237][ T291] EXT4-fs (loop0): Remounting filesystem read-only [ 37.603530][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.612124][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.621413][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.630840][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.675557][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.675792][ T28] audit: type=1400 audit(3934351904.884:408): avc: denied { remount } for pid=783 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.702208][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.710631][ T770] device bridge_slave_0 entered promiscuous mode [ 37.755316][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.781700][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.786464][ T794] loop9: detected capacity change from 0 to 256 [ 37.789546][ T770] device bridge_slave_1 entered promiscuous mode [ 37.817544][ T794] exfat: Deprecated parameter 'namecase' [ 37.836681][ T794] exfat: Deprecated parameter 'namecase' [ 37.848547][ T794] exfat: Deprecated parameter 'namecase' [ 37.862979][ T794] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 37.876069][ T794] exfat filesystem being mounted at /1/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 37.950502][ T798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=798 comm=syz.8.105 [ 37.979278][ T322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=322 comm=kworker/1:3 [ 37.984801][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.999171][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.006440][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.013514][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.416772][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.424641][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.433587][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.443782][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.474023][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.490666][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.499609][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.522169][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.530279][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.539965][ T770] device veth0_vlan entered promiscuous mode [ 38.556485][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.564302][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.586712][ T770] device veth1_macvtap entered promiscuous mode [ 38.593978][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.603894][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.612278][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.642756][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.651438][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.660743][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.669858][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.728832][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.737439][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.745775][ T805] device bridge_slave_0 entered promiscuous mode [ 38.753173][ T10] device bridge_slave_1 left promiscuous mode [ 38.759500][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.767096][ T10] device bridge_slave_0 left promiscuous mode [ 38.773331][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.783621][ T10] device bridge_slave_1 left promiscuous mode [ 38.793837][ T291] EXT4-fs error: 187 callbacks suppressed [ 38.793851][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 38.794941][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.827474][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 38.849966][ T10] device bridge_slave_0 left promiscuous mode [ 38.856144][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.876045][ T10] device veth1_macvtap left promiscuous mode [ 38.886728][ T10] device veth0_vlan left promiscuous mode [ 38.897511][ T10] device veth1_macvtap left promiscuous mode [ 38.908170][ T10] device veth0_vlan left promiscuous mode [ 38.931763][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 38.980824][ T291] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.037994][ T291] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 39.080553][ T291] EXT4-fs warning: 90 callbacks suppressed [ 39.080573][ T291] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 39.231237][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.238329][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.246228][ T805] device bridge_slave_1 entered promiscuous mode [ 39.257284][ T822] loop4: detected capacity change from 0 to 128 [ 39.269280][ T822] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.310990][ T822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.340761][ T822] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.361748][ T822] EXT4-fs (loop4): unmounting filesystem. [ 39.408285][ T832] loop4: detected capacity change from 0 to 512 [ 39.413182][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.422684][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.431114][ T814] device bridge_slave_0 entered promiscuous mode [ 39.442602][ T832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.448433][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.459928][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.467962][ T814] device bridge_slave_1 entered promiscuous mode [ 39.476305][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.476619][ T832] EXT4-fs (loop4): 1 truncate cleaned up [ 39.483402][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.483500][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.503360][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.512961][ T823] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.526166][ T823] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.533845][ T832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.593680][ T832] bridge0: port 3(syz_tun) entered blocking state [ 39.600230][ T832] bridge0: port 3(syz_tun) entered disabled state [ 39.606974][ T832] device syz_tun entered promiscuous mode [ 39.613026][ T832] bridge0: port 3(syz_tun) entered blocking state [ 39.619476][ T832] bridge0: port 3(syz_tun) entered forwarding state [ 39.649256][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.657485][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.657612][ T770] EXT4-fs (loop4): unmounting filesystem. [ 39.701204][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.709836][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.718119][ T823] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.725306][ T823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.732782][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.741705][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.750516][ T823] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.757563][ T823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.775346][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.783532][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.801282][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.809931][ T823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.832373][ T834] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.840177][ T834] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.850138][ T834] device bridge_slave_0 entered promiscuous mode [ 39.857234][ T834] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.864550][ T834] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.872294][ T834] device bridge_slave_1 entered promiscuous mode [ 39.920525][ T805] device veth0_vlan entered promiscuous mode [ 39.940594][ T805] device veth1_macvtap entered promiscuous mode [ 39.985338][ T850] binder: 849:850 ioctl c0306201 200000000080 returned -14 [ 39.995694][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.009461][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.026024][ T850] binder: 849:850 ioctl c0306201 2000000003c0 returned -14 [ 40.035127][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.054194][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.065884][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.074895][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.086385][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.094428][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.102809][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.108815][ T854] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿ [ 40.111276][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.127618][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.152028][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.159678][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.216207][ T860] loop4: detected capacity change from 0 to 512 [ 40.226851][ T319] udevd[319]: incorrect ext4 checksum on /dev/loop4 [ 40.236236][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.246638][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.257963][ T857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 40.266888][ T857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 40.287964][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.300412][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.310009][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.317065][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.324570][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.333660][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.341918][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.349046][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.356704][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.364907][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.391178][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.414168][ T867] fuse: Bad value for 'fd' [ 40.416715][ T814] device veth0_vlan entered promiscuous mode [ 40.447290][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.458877][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.467020][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.475493][ T881] binder: 880:881 ioctl c0306201 200000000080 returned -14 [ 40.477314][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.483789][ T881] binder: 880:881 ioctl c0306201 2000000003c0 returned -14 [ 40.507161][ T814] device veth1_macvtap entered promiscuous mode [ 40.522619][ T825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.553267][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.562086][ T883] futex_wake_op: syz.4.150 tries to shift op by 144; fix this program [ 40.570909][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.603499][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.611218][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.620206][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.628804][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.637175][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.645892][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.654629][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.661712][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.669508][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.669774][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.685935][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.685953][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.701288][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.721335][ T886] loop4: detected capacity change from 0 to 256 [ 40.743027][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.752049][ T319] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.752582][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.792683][ T896] FAULT_INJECTION: forcing a failure. [ 40.792683][ T896] name failslab, interval 1, probability 0, space 0, times 0 [ 40.805938][ T896] CPU: 1 PID: 896 Comm: syz.4.152 Not tainted syzkaller #0 [ 40.813183][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.818085][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.823276][ T896] Call Trace: [ 40.823284][ T896] [ 40.823290][ T896] __dump_stack+0x21/0x24 [ 40.831768][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.834496][ T896] dump_stack_lvl+0x110/0x170 [ 40.837677][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.841772][ T896] ? __cfi_dump_stack_lvl+0x8/0x8 [ 40.841798][ T896] dump_stack+0x15/0x24 [ 40.841818][ T896] should_fail_ex+0x3bf/0x510 [ 40.850945][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.854364][ T896] ? security_inode_alloc+0x33/0x120 [ 40.866579][ T834] device veth0_vlan entered promiscuous mode [ 40.867468][ T896] __should_failslab+0xac/0xf0 [ 40.872534][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.876300][ T896] should_failslab+0x9/0x20 [ 40.876331][ T896] kmem_cache_alloc+0x3b/0x320 [ 40.876356][ T896] security_inode_alloc+0x33/0x120 [ 40.885120][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.889713][ T896] inode_init_always+0x6ee/0x950 [ 40.889744][ T896] new_inode_pseudo+0xa2/0x1f0 [ 40.904079][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.908117][ T896] alloc_anon_inode+0x21/0x300 [ 40.908146][ T896] __anon_inode_getfile+0x141/0x350 [ 40.913130][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.917480][ T896] ? anon_inode_getfile+0x180/0x180 [ 40.917510][ T896] ? __kasan_check_write+0x14/0x20 [ 40.922935][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.930239][ T896] ? percpu_ref_init+0x23f/0x340 [ 40.930276][ T896] anon_inode_getfile_secure+0x3b/0x50 [ 40.930304][ T896] io_uring_create+0x91b/0xde1 [ 40.935676][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.940005][ T896] __x64_sys_io_uring_setup+0x21b/0x230 [ 40.940034][ T896] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 40.947973][ T834] device veth1_macvtap entered promiscuous mode [ 40.952155][ T896] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 40.952184][ T896] x64_sys_call+0x4ab/0x9a0 [ 40.952205][ T896] do_syscall_64+0x4c/0xa0 [ 40.969637][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.969777][ T896] ? clear_bhb_loop+0x30/0x80 [ 40.975186][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.982779][ T896] ? clear_bhb_loop+0x30/0x80 [ 40.982801][ T896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 40.982826][ T896] RIP: 0033:0x7f65bb19e0d9 [ 40.988618][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.993549][ T896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.993568][ T896] RSP: 002b:00007f65bbfabee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 41.111165][ T896] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f65bb19e0d9 [ 41.119150][ T896] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 41.127112][ T896] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 41.135073][ T896] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 41.143037][ T896] R13: 0000000000000090 R14: 00007f65bbfabfd8 R15: 0000000000000000 [ 41.151100][ T896] [ 41.158221][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.167991][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.179365][ T317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 41.201593][ T906] loop2: detected capacity change from 0 to 16 [ 41.218293][ T906] erofs: (device loop2): mounted with root inode @ nid 36. [ 41.230609][ T10] device bridge_slave_1 left promiscuous mode [ 41.236899][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.244631][ T10] device bridge_slave_0 left promiscuous mode [ 41.250940][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.259479][ T10] device bridge_slave_1 left promiscuous mode [ 41.265612][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.273180][ T10] device bridge_slave_0 left promiscuous mode [ 41.279369][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.289130][ T10] device bridge_slave_1 left promiscuous mode [ 41.295565][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.304129][ T10] device bridge_slave_0 left promiscuous mode [ 41.310719][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.320560][ T10] device veth1_macvtap left promiscuous mode [ 41.323442][ T914] loop1: detected capacity change from 0 to 4096 [ 41.326715][ T10] device veth0_vlan left promiscuous mode [ 41.333845][ T915] syz.2.135: attempt to access beyond end of device [ 41.333845][ T915] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 41.354002][ T915] syz.2.135: attempt to access beyond end of device [ 41.354002][ T915] loop2: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 41.355418][ T914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.376635][ T914] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.376720][ T10] device veth1_macvtap left promiscuous mode [ 41.384959][ T317] usb 4-1: config index 0 descriptor too short (expected 45, got 28) [ 41.394477][ T10] device veth0_vlan left promiscuous mode [ 41.397946][ T914] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c118, mo2=0003] [ 41.411808][ T317] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 41.415135][ T914] System zones: [ 41.419446][ T317] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 41.419804][ T914] 0-5 [ 41.425024][ T317] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 41.436309][ T914] [ 41.438733][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.450215][ T914] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.458217][ T317] usb 4-1: Product: syz [ 41.458234][ T317] usb 4-1: Manufacturer: syz [ 41.474324][ T10] device veth1_macvtap left promiscuous mode [ 41.477339][ T317] usb 4-1: SerialNumber: syz [ 41.482181][ T10] device veth0_vlan left promiscuous mode [ 41.489167][ T914] EXT4-fs (loop1): mount failed [ 41.505092][ T317] rtl8150 4-1:1.0: couldn't find required endpoints [ 41.512453][ T317] rtl8150: probe of 4-1:1.0 failed with error -5 [ 41.629556][ T917] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 41.713355][ T898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.721959][ T898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.731206][ T60] usb 4-1: USB disconnect, device number 2 [ 41.792708][ T912] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.834961][ T924] binder: 922:924 ioctl c0306201 200000000080 returned -14 [ 41.852917][ T924] binder: 922:924 ioctl c0306201 2000000003c0 returned -14 [ 41.900328][ T935] FAULT_INJECTION: forcing a failure. [ 41.900328][ T935] name failslab, interval 1, probability 0, space 0, times 0 [ 41.913120][ T935] CPU: 0 PID: 935 Comm: syz.1.163 Not tainted syzkaller #0 [ 41.920340][ T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.930389][ T935] Call Trace: [ 41.933691][ T935] [ 41.936617][ T935] __dump_stack+0x21/0x24 [ 41.940946][ T935] dump_stack_lvl+0x110/0x170 [ 41.945622][ T935] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.950738][ T935] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 41.956462][ T935] dump_stack+0x15/0x24 [ 41.960799][ T935] should_fail_ex+0x3bf/0x510 [ 41.965497][ T935] __should_failslab+0xac/0xf0 [ 41.970275][ T935] should_failslab+0x9/0x20 [ 41.974777][ T935] slab_pre_alloc_hook+0x30/0x1d0 [ 41.979891][ T935] kmem_cache_alloc_lru+0x49/0x280 [ 41.985017][ T935] ? __d_alloc+0x34/0x6d0 [ 41.989343][ T935] __d_alloc+0x34/0x6d0 [ 41.993524][ T935] d_alloc_pseudo+0x1d/0x70 [ 41.998027][ T935] alloc_file_pseudo+0xe0/0x200 [ 42.002888][ T935] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 42.008350][ T935] ? alloc_anon_inode+0x225/0x300 [ 42.013647][ T935] ? memcpy+0x56/0x70 [ 42.017621][ T935] ? security_inode_init_security_anon+0x95/0xc0 [ 42.023943][ T935] __anon_inode_getfile+0x22f/0x350 [ 42.029137][ T935] ? anon_inode_getfile+0x180/0x180 [ 42.034331][ T935] ? __kasan_check_write+0x14/0x20 [ 42.039436][ T935] ? percpu_ref_init+0x23f/0x340 [ 42.044383][ T935] anon_inode_getfile_secure+0x3b/0x50 [ 42.049960][ T935] io_uring_create+0x91b/0xde1 [ 42.054913][ T935] __x64_sys_io_uring_setup+0x21b/0x230 [ 42.060489][ T935] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 42.066581][ T935] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 42.072647][ T935] x64_sys_call+0x4ab/0x9a0 [ 42.077144][ T935] do_syscall_64+0x4c/0xa0 [ 42.081551][ T935] ? clear_bhb_loop+0x30/0x80 [ 42.086216][ T935] ? clear_bhb_loop+0x30/0x80 [ 42.090883][ T935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.096774][ T935] RIP: 0033:0x7f5c6839e0d9 [ 42.101199][ T935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.120796][ T935] RSP: 002b:00007f5c69240ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 42.129211][ T935] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5c6839e0d9 [ 42.137194][ T935] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 42.145180][ T935] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 42.153168][ T935] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 42.161133][ T935] R13: 0000000000000090 R14: 00007f5c69240fd8 R15: 0000000000000000 [ 42.169101][ T935] [ 42.187964][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 42.187981][ T28] audit: type=1400 audit(3934351909.394:429): avc: denied { mounton } for pid=936 comm="syz.1.164" path="/10/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.188010][ T937] overlayfs: unrecognized mount option "/" or missing value [ 42.226403][ T28] audit: type=1400 audit(3934351909.434:430): avc: denied { read } for pid=936 comm="syz.1.164" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.248162][ T28] audit: type=1400 audit(3934351909.434:431): avc: denied { open } for pid=936 comm="syz.1.164" path="/10/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 42.283077][ T28] audit: type=1400 audit(3934351909.494:432): avc: denied { write } for pid=938 comm="syz.1.165" name="wireless" dev="proc" ino=4026533209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.322347][ T942] loop4: detected capacity change from 0 to 1024 [ 42.340008][ T942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.453582][ T952] mmap: syz.1.169 (952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.460328][ T942] kvm [941]: vcpu1, guest rIP: 0x914e Unhandled WRMSR(0x187) = 0xffff0000ffff0000 [ 42.474902][ T28] audit: type=1400 audit(3934351909.674:433): avc: denied { connect } for pid=946 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.481356][ T952] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.498208][ T942] kvm [941]: vcpu1, guest rIP: 0x9150 Unhandled WRMSR(0x187) = 0xffff0000ffff0000 [ 42.512582][ T942] kvm [941]: vcpu1, guest rIP: 0x914e Unhandled WRMSR(0x186) = 0xffff0000ffff0000 [ 42.528654][ T942] kvm [941]: vcpu1, guest rIP: 0x9150 Unhandled WRMSR(0x186) = 0xffff0000ffff0000 [ 42.542947][ T954] binder: BINDER_SET_CONTEXT_MGR already set [ 42.547856][ T959] loop3: detected capacity change from 0 to 512 [ 42.555654][ T954] binder: 953:954 ioctl 4018620d 200000000040 returned -16 [ 42.574484][ T942] kvm [941]: vcpu1, guest rIP: 0x914e Unhandled WRMSR(0x11e) = 0xffff0000ffff0000 [ 42.589619][ T942] kvm [941]: vcpu1, guest rIP: 0x9150 Unhandled WRMSR(0x11e) = 0xffff0000ffff0000 [ 42.590437][ T959] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 42.602039][ T942] kvm [941]: vcpu1, guest rIP: 0x914e Unhandled WRMSR(0xc2) = 0xffff0000ffff0000 [ 42.623162][ T962] binder: 961:962 ioctl c0306201 200000000080 returned -14 [ 42.637171][ T942] kvm [941]: vcpu1, guest rIP: 0x9150 Unhandled WRMSR(0xc2) = 0xffff0000ffff0000 [ 42.642043][ T962] binder: 961:962 ioctl c0306201 2000000003c0 returned -14 [ 42.659246][ T942] kvm [941]: vcpu1, guest rIP: 0x914e Unhandled WRMSR(0xc1) = 0xffff0000ffff0000 [ 42.670009][ T959] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #11: comm syz.3.172: corrupted inode contents [ 42.670901][ T942] kvm [941]: vcpu1, guest rIP: 0x9150 Unhandled WRMSR(0xc1) = 0xffff0000ffff0000 [ 42.709254][ T966] FAULT_INJECTION: forcing a failure. [ 42.709254][ T966] name failslab, interval 1, probability 0, space 0, times 0 [ 42.711161][ T959] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #11: comm syz.3.172: mark_inode_dirty error [ 42.728550][ T966] CPU: 0 PID: 966 Comm: syz.2.175 Not tainted syzkaller #0 [ 42.733584][ T959] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.172: invalid indirect mapped block 1 (level 1) [ 42.740415][ T966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.740428][ T966] Call Trace: [ 42.740434][ T966] [ 42.740441][ T966] __dump_stack+0x21/0x24 [ 42.753847][ T959] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #11: comm syz.3.172: corrupted inode contents [ 42.763612][ T966] dump_stack_lvl+0x110/0x170 [ 42.763639][ T966] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.763663][ T966] dump_stack+0x15/0x24 [ 42.767222][ T959] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 42.769953][ T966] should_fail_ex+0x3bf/0x510 [ 42.769974][ T966] ? __alloc_file+0x28/0x2a0 [ 42.774413][ T959] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #11: comm syz.3.172: corrupted inode contents [ 42.786157][ T966] __should_failslab+0xac/0xf0 [ 42.786185][ T966] should_failslab+0x9/0x20 [ 42.786203][ T966] kmem_cache_alloc+0x3b/0x320 [ 42.786226][ T966] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.786249][ T966] __alloc_file+0x28/0x2a0 [ 42.786269][ T966] alloc_empty_file+0x97/0x180 [ 42.786290][ T966] alloc_file+0x59/0x600 [ 42.786311][ T966] ? _raw_spin_unlock+0x4c/0x70 [ 42.791287][ T959] EXT4-fs error (device loop3): ext4_truncate:4327: inode #11: comm syz.3.172: mark_inode_dirty error [ 42.795990][ T966] alloc_file_pseudo+0x180/0x200 [ 42.800268][ T959] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 42.808617][ T966] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 42.808642][ T966] ? alloc_anon_inode+0x225/0x300 [ 42.813518][ T959] EXT4-fs (loop3): 1 truncate cleaned up [ 42.817887][ T966] ? memcpy+0x56/0x70 [ 42.829675][ T959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.834511][ T966] ? security_inode_init_security_anon+0x95/0xc0 [ 42.927348][ T966] __anon_inode_getfile+0x22f/0x350 [ 42.932547][ T966] ? anon_inode_getfile+0x180/0x180 [ 42.937735][ T966] ? __kasan_check_write+0x14/0x20 [ 42.942833][ T966] ? percpu_ref_init+0x23f/0x340 [ 42.947770][ T966] anon_inode_getfile_secure+0x3b/0x50 [ 42.953219][ T966] io_uring_create+0x91b/0xde1 [ 42.957975][ T966] __x64_sys_io_uring_setup+0x21b/0x230 [ 42.963512][ T966] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 42.969572][ T966] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 42.975634][ T966] x64_sys_call+0x4ab/0x9a0 [ 42.980347][ T966] do_syscall_64+0x4c/0xa0 [ 42.984860][ T966] ? clear_bhb_loop+0x30/0x80 [ 42.989542][ T966] ? clear_bhb_loop+0x30/0x80 [ 42.994225][ T966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.000204][ T966] RIP: 0033:0x7fa28eb9e0d9 [ 43.004613][ T966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.024234][ T966] RSP: 002b:00007fa28fa34ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 43.032643][ T966] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fa28eb9e0d9 [ 43.040610][ T966] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 43.048590][ T966] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 43.056566][ T966] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 43.064545][ T966] R13: 0000000000000090 R14: 00007fa28fa34fd8 R15: 0000000000000000 [ 43.072517][ T966] [ 43.088640][ T814] EXT4-fs (loop3): unmounting filesystem. [ 43.127980][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 43.151852][ T980] loop2: detected capacity change from 0 to 512 [ 43.159774][ T770] EXT4-fs (loop4): unmounting filesystem. [ 43.179901][ T980] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.179: bg 0: block 104: invalid block bitmap [ 43.198089][ T980] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 43.218436][ T980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.179: invalid indirect mapped block 1 (level 1) [ 43.231653][ T317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.243708][ T980] EXT4-fs (loop2): 1 truncate cleaned up [ 43.249716][ T980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.304301][ T834] EXT4-fs (loop2): unmounting filesystem. [ 43.332694][ T28] audit: type=1400 audit(3934351910.544:434): avc: denied { bind } for pid=992 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.389496][ T1000] binder: 998:1000 ioctl 4018620d 0 returned -22 [ 43.391916][ T999] loop4: detected capacity change from 0 to 16 [ 43.396269][ T1000] binder: 998:1000 ioctl c0306201 200000000080 returned -14 [ 43.413346][ T1000] binder: 998:1000 ioctl c0306201 2000000003c0 returned -14 [ 43.423662][ T317] usb 2-1: Using ep0 maxpacket: 16 [ 43.428960][ T999] erofs: (device loop4): mounted with root inode @ nid 36. [ 43.436468][ T317] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.452135][ T317] usb 2-1: config 0 has no interface number 0 [ 43.473265][ T317] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 43.474935][ T1002] FAULT_INJECTION: forcing a failure. [ 43.474935][ T1002] name failslab, interval 1, probability 0, space 0, times 0 [ 43.482793][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.506080][ T1004] loop2: detected capacity change from 0 to 512 [ 43.512093][ T1002] CPU: 1 PID: 1002 Comm: syz.4.187 Not tainted syzkaller #0 [ 43.519680][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.529755][ T1002] Call Trace: [ 43.533081][ T1002] [ 43.536022][ T1002] __dump_stack+0x21/0x24 [ 43.540370][ T1002] dump_stack_lvl+0x110/0x170 [ 43.545080][ T1002] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.550121][ T1002] dump_stack+0x15/0x24 [ 43.554404][ T1002] should_fail_ex+0x3bf/0x510 [ 43.559161][ T1002] ? security_file_alloc+0x33/0x130 [ 43.564389][ T1002] __should_failslab+0xac/0xf0 [ 43.569177][ T1002] should_failslab+0x9/0x20 [ 43.573710][ T1002] kmem_cache_alloc+0x3b/0x320 [ 43.578481][ T1002] ? __alloc_file+0x28/0x2a0 [ 43.583078][ T1002] security_file_alloc+0x33/0x130 [ 43.588128][ T1002] __alloc_file+0xb5/0x2a0 [ 43.592547][ T1002] alloc_empty_file+0x97/0x180 [ 43.597334][ T1002] alloc_file+0x59/0x600 [ 43.601578][ T1002] ? _raw_spin_unlock+0x4c/0x70 [ 43.606432][ T1002] alloc_file_pseudo+0x180/0x200 [ 43.611486][ T1002] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 43.616954][ T1002] ? alloc_anon_inode+0x225/0x300 [ 43.622158][ T1002] ? memcpy+0x56/0x70 [ 43.626139][ T1002] ? security_inode_init_security_anon+0x95/0xc0 [ 43.632473][ T1002] __anon_inode_getfile+0x22f/0x350 [ 43.637677][ T1002] ? anon_inode_getfile+0x180/0x180 [ 43.642876][ T1002] ? __kasan_check_write+0x14/0x20 [ 43.648394][ T1002] ? percpu_ref_init+0x23f/0x340 [ 43.653648][ T1002] anon_inode_getfile_secure+0x3b/0x50 [ 43.659138][ T1002] io_uring_create+0x91b/0xde1 [ 43.664014][ T1002] __x64_sys_io_uring_setup+0x21b/0x230 [ 43.669835][ T1002] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 43.675933][ T1002] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 43.682004][ T1002] x64_sys_call+0x4ab/0x9a0 [ 43.686511][ T1002] do_syscall_64+0x4c/0xa0 [ 43.690930][ T1002] ? clear_bhb_loop+0x30/0x80 [ 43.695688][ T1002] ? clear_bhb_loop+0x30/0x80 [ 43.700366][ T1002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.706263][ T1002] RIP: 0033:0x7f65bb19e0d9 [ 43.710942][ T1002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.730550][ T1002] RSP: 002b:00007f65bbfabee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 43.738964][ T1002] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f65bb19e0d9 [ 43.747019][ T1002] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 43.754985][ T1002] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 43.762962][ T1002] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 43.770933][ T1002] R13: 0000000000000090 R14: 00007f65bbfabfd8 R15: 0000000000000000 [ 43.778903][ T1002] [ 43.788126][ T317] usb 2-1: config 0 descriptor?? [ 43.808195][ T1004] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.188: inode has both inline data and extents flags [ 43.826062][ T1004] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.188: couldn't read orphan inode 15 (err -117) [ 43.838755][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.884706][ T1008] loop4: detected capacity change from 0 to 2048 [ 43.939919][ T1008] ext4: Unknown parameter 'noacl' [ 43.988016][ T28] audit: type=1400 audit(3934351911.194:435): avc: denied { create } for pid=1003 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.010065][ T834] EXT4-fs (loop2): unmounting filesystem. [ 44.117422][ T1010] loop3: detected capacity change from 0 to 40427 [ 44.124753][ T1010] F2FS-fs (loop3): Image doesn't support compression [ 44.131585][ T1010] F2FS-fs (loop3): heap/no_heap options were deprecated [ 44.139436][ T1010] F2FS-fs (loop3): invalid crc value [ 44.145996][ T1010] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.176417][ T1010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.348414][ T321] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 44.410101][ T317] uclogic 0003:28BD:0071.0001: pen parameters not found [ 44.419639][ T317] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 44.429447][ T317] usb 2-1: USB disconnect, device number 5 [ 44.529484][ T321] usb 3-1: config 2 has an invalid interface number: 168 but max is 0 [ 44.537799][ T321] usb 3-1: config 2 has no interface number 0 [ 44.544290][ T321] usb 3-1: config 2 interface 168 has no altsetting 0 [ 44.557974][ T321] usb 3-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 44.567180][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.575266][ T321] usb 3-1: Product: syz [ 44.579530][ T321] usb 3-1: Manufacturer: syz [ 44.584151][ T321] usb 3-1: SerialNumber: syz [ 44.611651][ T1040] binder: 1039:1040 ioctl 4018620d 0 returned -22 [ 44.618885][ T1040] binder: 1039:1040 ioctl c0306201 200000000080 returned -14 [ 44.627468][ T1040] binder: 1039:1040 ioctl c0306201 2000000003c0 returned -14 [ 44.645950][ T1042] FAULT_INJECTION: forcing a failure. [ 44.645950][ T1042] name failslab, interval 1, probability 0, space 0, times 0 [ 44.659176][ T1042] CPU: 1 PID: 1042 Comm: syz.4.199 Not tainted syzkaller #0 [ 44.666487][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.676632][ T1042] Call Trace: [ 44.679909][ T1042] [ 44.682836][ T1042] __dump_stack+0x21/0x24 [ 44.687170][ T1042] dump_stack_lvl+0x110/0x170 [ 44.691931][ T1042] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.696969][ T1042] ? security_file_alloc+0x33/0x130 [ 44.702278][ T1042] ? security_file_alloc+0x33/0x130 [ 44.708182][ T1042] dump_stack+0x15/0x24 [ 44.712346][ T1042] should_fail_ex+0x3bf/0x510 [ 44.717045][ T1042] __should_failslab+0xac/0xf0 [ 44.721815][ T1042] should_failslab+0x9/0x20 [ 44.726325][ T1042] __kmem_cache_alloc_node+0x3d/0x2d0 [ 44.731700][ T1042] ? io_uring_alloc_task_context+0xaa/0x540 [ 44.737610][ T1042] ? alloc_file+0x49d/0x600 [ 44.742136][ T1042] ? io_uring_alloc_task_context+0xaa/0x540 [ 44.748043][ T1042] kmalloc_trace+0x29/0xb0 [ 44.752468][ T1042] io_uring_alloc_task_context+0xaa/0x540 [ 44.758196][ T1042] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 44.763664][ T1042] ? __cfi_io_uring_alloc_task_context+0x8/0x8 [ 44.769942][ T1042] ? __kasan_check_write+0x14/0x20 [ 44.775050][ T1042] ? _raw_spin_lock+0x94/0xf0 [ 44.779754][ T1042] ? __cfi__raw_spin_lock+0x10/0x10 [ 44.785030][ T1042] ? security_inode_init_security_anon+0x95/0xc0 [ 44.791371][ T1042] __io_uring_add_tctx_node+0x349/0x4f0 [ 44.797368][ T1042] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 44.803447][ T1042] io_uring_install_fd+0x35/0x80 [ 44.808496][ T1042] io_uring_create+0x935/0xde1 [ 44.813447][ T1042] __x64_sys_io_uring_setup+0x21b/0x230 [ 44.818989][ T1042] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 44.825077][ T1042] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.831170][ T1042] x64_sys_call+0x4ab/0x9a0 [ 44.835687][ T1042] do_syscall_64+0x4c/0xa0 [ 44.840110][ T1042] ? clear_bhb_loop+0x30/0x80 [ 44.844790][ T1042] ? clear_bhb_loop+0x30/0x80 [ 44.849493][ T1042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.855417][ T1042] RIP: 0033:0x7f65bb19e0d9 [ 44.859852][ T1042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.879729][ T1042] RSP: 002b:00007f65bbfabee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 44.888242][ T1042] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f65bb19e0d9 [ 44.896233][ T1042] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 44.904209][ T1042] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 44.912185][ T1042] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 44.920328][ T1042] R13: 0000000000000090 R14: 00007f65bbfabfd8 R15: 0000000000000000 [ 44.928306][ T1042] [ 44.945001][ T321] usb-storage 3-1:2.168: USB Mass Storage device detected [ 44.985207][ T321] usb-storage 3-1:2.168: Quirks match for vid 0781 pid 0001: 1 [ 44.987474][ T1051] EXT4-fs: Ignoring removed nobh option [ 45.013948][ T321] usb 3-1: USB disconnect, device number 2 [ 45.066656][ T1054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 45.075652][ T1051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.085134][ T1051] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.114307][ T1051] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #2: comm syz.2.201: corrupted inode contents [ 45.126260][ T1051] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #2: comm syz.2.201: mark_inode_dirty error [ 45.139634][ T1051] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #2: comm syz.2.201: corrupted inode contents [ 45.152722][ T1051] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.201: mark_inode_dirty error [ 45.281382][ T1062] EXT4-fs: Ignoring removed nobh option [ 45.288087][ T28] audit: type=1400 audit(3934351912.494:436): avc: denied { mounton } for pid=1048 comm="syz.4.202" path="/syzcgroup/cpu/syz4/memory.limit_in_bytes" dev="cgroup" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 45.314850][ T1062] EXT4-fs: Mount option(s) incompatible with ext3 [ 45.402310][ T1051] incfs: ino conflict with backing FS 2 [ 45.552704][ T1051] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #2: comm syz.2.201: corrupted inode contents [ 45.715981][ T1051] EXT4-fs error (device loop2): ext4_dirty_inode:6158: inode #2: comm syz.2.201: mark_inode_dirty error [ 45.887951][ T1067] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #2: comm syz.2.201: corrupted inode contents [ 46.165592][ T1051] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #2: comm syz.2.201: corrupted inode contents [ 46.224073][ T1067] EXT4-fs error (device loop2): ext4_rmdir:3258: inode #2: comm syz.2.201: mark_inode_dirty error [ 46.338469][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 46.357383][ T28] audit: type=1400 audit(3934351913.564:437): avc: denied { create } for pid=1050 comm="syz.2.201" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.380470][ T1065] EXT4-fs error (device loop2): ext4_do_update_inode:5281: inode #2: comm syz.2.201: corrupted inode contents [ 46.400480][ T1065] EXT4-fs (loop2): unmounting filesystem. [ 46.419812][ T28] audit: type=1400 audit(3934351913.634:438): avc: denied { write } for pid=1073 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.451529][ T1077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'. [ 46.470714][ T1082] binder: 1081:1082 ioctl 4018620d 0 returned -22 [ 46.477507][ T1082] binder: 1081:1082 ioctl c0306201 200000000080 returned -14 [ 46.486015][ T1082] binder: 1081:1082 ioctl c0306201 2000000003c0 returned -14 [ 46.642433][ T1087] set_capacity_and_notify: 2 callbacks suppressed [ 46.642450][ T1087] loop4: detected capacity change from 0 to 2048 [ 46.660427][ T1088] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 46.703325][ T1087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.741803][ T770] EXT4-fs (loop4): unmounting filesystem. [ 46.791423][ T1094] FAULT_INJECTION: forcing a failure. [ 46.791423][ T1094] name failslab, interval 1, probability 0, space 0, times 0 [ 46.818542][ T1094] CPU: 0 PID: 1094 Comm: syz.4.213 Not tainted syzkaller #0 [ 46.826087][ T1094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.836159][ T1094] Call Trace: [ 46.839453][ T1094] [ 46.842396][ T1094] __dump_stack+0x21/0x24 [ 46.846748][ T1094] dump_stack_lvl+0x110/0x170 [ 46.851449][ T1094] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.856493][ T1094] ? __bitmap_weight+0xb9/0x110 [ 46.861452][ T1094] ? __alloc_percpu_gfp+0x25/0x30 [ 46.866515][ T1094] dump_stack+0x15/0x24 [ 46.870685][ T1094] should_fail_ex+0x3bf/0x510 [ 46.875380][ T1094] __should_failslab+0xac/0xf0 [ 46.880167][ T1094] should_failslab+0x9/0x20 [ 46.884688][ T1094] __kmem_cache_alloc_node+0x3d/0x2d0 [ 46.890253][ T1094] ? io_uring_alloc_task_context+0x17f/0x540 [ 46.896251][ T1094] ? __cfi_mutex_lock+0x10/0x10 [ 46.901133][ T1094] ? io_uring_alloc_task_context+0x17f/0x540 [ 46.907651][ T1094] kmalloc_trace+0x29/0xb0 [ 46.912093][ T1094] io_uring_alloc_task_context+0x17f/0x540 [ 46.917916][ T1094] ? __cfi_io_uring_alloc_task_context+0x8/0x8 [ 46.924096][ T1094] ? __kasan_check_write+0x14/0x20 [ 46.929237][ T1094] ? _raw_spin_lock+0x94/0xf0 [ 46.933938][ T1094] ? __cfi__raw_spin_lock+0x10/0x10 [ 46.939151][ T1094] ? security_inode_init_security_anon+0x95/0xc0 [ 46.945502][ T1094] __io_uring_add_tctx_node+0x349/0x4f0 [ 46.951071][ T1094] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 46.957165][ T1094] io_uring_install_fd+0x35/0x80 [ 46.962128][ T1094] io_uring_create+0x935/0xde1 [ 46.966916][ T1094] __x64_sys_io_uring_setup+0x21b/0x230 [ 46.972485][ T1094] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 46.978584][ T1094] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.984670][ T1094] x64_sys_call+0x4ab/0x9a0 [ 46.989193][ T1094] do_syscall_64+0x4c/0xa0 [ 46.993628][ T1094] ? clear_bhb_loop+0x30/0x80 [ 46.998316][ T1094] ? clear_bhb_loop+0x30/0x80 [ 47.003001][ T1094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 47.008921][ T1094] RIP: 0033:0x7f65bb19e0d9 [ 47.013351][ T1094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.033181][ T1094] RSP: 002b:00007f65bbfabee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 47.041797][ T1094] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f65bb19e0d9 [ 47.049781][ T1094] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 47.057777][ T1094] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 47.065939][ T1094] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 47.074216][ T1094] R13: 0000000000000090 R14: 00007f65bbfabfd8 R15: 0000000000000000 [ 47.082219][ T1094] [ 47.168060][ T1097] loop2: detected capacity change from 0 to 512 [ 47.168427][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 47.183448][ T24] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 47.193770][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.202840][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.208151][ T1097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.227390][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 47.239852][ T1098] loop4: detected capacity change from 0 to 548 [ 47.246551][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.256568][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.257492][ T1097] EXT4-fs (loop2): 1 truncate cleaned up [ 47.266790][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.273857][ T24] usb 2-1: Product: syz [ 47.280938][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.293328][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.293408][ T24] usb 2-1: Manufacturer: syz [ 47.302497][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.308504][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.315775][ T1097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.324456][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.333164][ T24] usb 2-1: SerialNumber: syz [ 47.343527][ T1092] loop3: detected capacity change from 0 to 40427 [ 47.350139][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.359513][ T1092] F2FS-fs (loop3): invalid crc value [ 47.360919][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.374745][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.383920][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 47.399341][ T1092] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.420926][ T834] EXT4-fs (loop2): unmounting filesystem. [ 47.449855][ T1092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.460951][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 47.490439][ T1112] loop2: detected capacity change from 0 to 2048 [ 47.509544][ T1112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.518138][ T1112] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.554130][ T834] EXT4-fs (loop2): unmounting filesystem. [ 47.584996][ T1118] netlink: 277 bytes leftover after parsing attributes in process `syz.2.219'. [ 47.595987][ T24] usb 2-1: USB disconnect, device number 6 [ 47.603539][ T1118] 9pnet_fd: Insufficient options for proto=fd [ 47.618499][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 47.629018][ T1120] binder: BINDER_SET_CONTEXT_MGR already set [ 47.635656][ T1120] binder: 1119:1120 ioctl 4018620d 200000000040 returned -16 [ 47.808498][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 47.815859][ T39] usb 5-1: config 127 has an invalid interface number: 235 but max is 2 [ 47.824623][ T39] usb 5-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 47.833775][ T39] usb 5-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 47.844085][ T39] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 3 [ 47.853237][ T39] usb 5-1: config 127 has no interface number 0 [ 47.859610][ T39] usb 5-1: config 127 interface 235 altsetting 1 bulk endpoint 0xF has invalid maxpacket 64 [ 47.869703][ T39] usb 5-1: config 127 interface 235 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 47.880612][ T39] usb 5-1: config 127 interface 235 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 47.891568][ T39] usb 5-1: config 127 interface 235 altsetting 1 endpoint 0x4 has an invalid bInterval 44, changing to 9 [ 47.902820][ T39] usb 5-1: config 127 interface 235 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 47.913965][ T39] usb 5-1: config 127 interface 235 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 47.924846][ T39] usb 5-1: config 127 interface 235 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 47.935845][ T39] usb 5-1: config 127 interface 235 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 47.946926][ T39] usb 5-1: config 127 interface 235 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 47.957988][ T322] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 47.965511][ T39] usb 5-1: config 127 interface 235 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 47.976463][ T39] usb 5-1: config 127 interface 235 has no altsetting 0 [ 47.985151][ T39] usb 5-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=cc.0e [ 47.994270][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.002379][ T39] usb 5-1: Product: ì°–ï®ì¬™âµšé¸ˆí”ᤃ櫎飕å¡è ¦æ–©ì…啽ffi猴牲ä›âƒ¹éŸ“ఱ䡹ꢠ㮼㟙á¦é¨‰èˆ–✑쟧㮬쀗ꊧ [ 48.015547][ T39] usb 5-1: Manufacturer: 骻錗瘂픳æ³é—¸í€‰ãµ è·³ìŸ“냱儚囀éœáƒŒì—¨ì«“ä‘닶⧔奌⠦Ⴉ췑뒰רּ顄袙剬窤럔æ¦í튦쬢鴙勉å鎤⾕Ⅳ謰홳礀枤⋒ݟ압êâ€ã‘™í”ŠæŽ¢ì¤®ï©ç§®æ¼—㶫օꆾåœï­—㗛滆오黽惨⮳㪫鴘뛓è™Ý¼ã¶«è†žì’½î¶€áž¡â«ƒçˆ’;圢髹둦ἱæ‘맯ఋ [ 48.044003][ T39] usb 5-1: SerialNumber: ဉ [ 48.049748][ T1098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.056943][ T1098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.064476][ T1098] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.193846][ T322] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 48.204346][ T322] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 48.213896][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.223643][ T322] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 48.452803][ T1130] loop1: detected capacity change from 0 to 4096 [ 48.461199][ T1130] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836 [ 48.550932][ T1130] loop1: detected capacity change from 0 to 16 [ 48.558537][ T1130] erofs: Unknown parameter '' [ 48.631082][ T39] usb 5-1: USB disconnect, device number 2 [ 49.098996][ T1136] loop3: detected capacity change from 0 to 512 [ 49.123868][ T1136] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.223: iget: bad i_size value: -1099511627766 [ 49.137383][ T1136] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.223: couldn't read orphan inode 15 (err -117) [ 49.149714][ T1136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 49.230523][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 49.230539][ T28] audit: type=1400 audit(3934351916.444:503): avc: denied { read append } for pid=1135 comm="syz.3.223" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.237145][ T322] usb 3-1: USB disconnect, device number 3 [ 49.262387][ T28] audit: type=1400 audit(3934351916.444:504): avc: denied { open } for pid=1135 comm="syz.3.223" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.302685][ T1145] FAULT_INJECTION: forcing a failure. [ 49.302685][ T1145] name failslab, interval 1, probability 0, space 0, times 0 [ 49.315436][ T1145] CPU: 0 PID: 1145 Comm: syz.1.225 Not tainted syzkaller #0 [ 49.322744][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.332884][ T1145] Call Trace: [ 49.336174][ T1145] [ 49.339103][ T1145] __dump_stack+0x21/0x24 [ 49.343432][ T1145] dump_stack_lvl+0x110/0x170 [ 49.348106][ T1145] ? __cfi_dump_stack_lvl+0x8/0x8 [ 49.353124][ T1145] ? kasan_set_track+0x60/0x70 [ 49.357880][ T1145] ? kasan_set_track+0x4b/0x70 [ 49.362642][ T1145] ? kasan_save_alloc_info+0x1f/0x30 [ 49.367931][ T1145] ? kmalloc_trace+0x40/0xb0 [ 49.372512][ T1145] ? io_uring_alloc_task_context+0x17f/0x540 [ 49.378503][ T1145] ? __io_uring_add_tctx_node+0x349/0x4f0 [ 49.384218][ T1145] ? io_uring_install_fd+0x35/0x80 [ 49.389320][ T1145] dump_stack+0x15/0x24 [ 49.393462][ T1145] should_fail_ex+0x3bf/0x510 [ 49.398142][ T1145] __should_failslab+0xac/0xf0 [ 49.402893][ T1145] should_failslab+0x9/0x20 [ 49.407386][ T1145] __kmem_cache_alloc_node+0x3d/0x2d0 [ 49.412745][ T1145] ? io_wq_create+0x130/0xb70 [ 49.417423][ T1145] ? io_wq_create+0x130/0xb70 [ 49.422091][ T1145] kmalloc_trace+0x29/0xb0 [ 49.426494][ T1145] io_wq_create+0x130/0xb70 [ 49.430986][ T1145] ? __kasan_check_write+0x14/0x20 [ 49.436091][ T1145] ? __cfi_io_wq_create+0x10/0x10 [ 49.441118][ T1145] ? __kasan_kmalloc+0x95/0xb0 [ 49.445867][ T1145] ? io_uring_alloc_task_context+0x17f/0x540 [ 49.451844][ T1145] io_uring_alloc_task_context+0x296/0x540 [ 49.457658][ T1145] ? __cfi_io_uring_alloc_task_context+0x8/0x8 [ 49.463803][ T1145] ? __cfi_io_wq_submit_work+0x10/0x10 [ 49.469272][ T1145] ? __cfi_io_wq_free_work+0x10/0x10 [ 49.474575][ T1145] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.479794][ T1145] ? security_inode_init_security_anon+0x95/0xc0 [ 49.486125][ T1145] __io_uring_add_tctx_node+0x349/0x4f0 [ 49.491661][ T1145] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 49.497720][ T1145] io_uring_install_fd+0x35/0x80 [ 49.502662][ T1145] io_uring_create+0x935/0xde1 [ 49.507416][ T1145] __x64_sys_io_uring_setup+0x21b/0x230 [ 49.512951][ T1145] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 49.519011][ T1145] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.525078][ T1145] x64_sys_call+0x4ab/0x9a0 [ 49.529569][ T1145] do_syscall_64+0x4c/0xa0 [ 49.533987][ T1145] ? clear_bhb_loop+0x30/0x80 [ 49.538656][ T1145] ? clear_bhb_loop+0x30/0x80 [ 49.543319][ T1145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.549226][ T1145] RIP: 0033:0x7f5c6839e0d9 [ 49.553631][ T1145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.573321][ T1145] RSP: 002b:00007f5c69240ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 49.581733][ T1145] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5c6839e0d9 [ 49.590063][ T1145] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 49.598038][ T1145] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 49.606084][ T1145] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 49.614044][ T1145] R13: 0000000000000090 R14: 00007f5c69240fd8 R15: 0000000000000000 [ 49.622208][ T1145] [ 49.662936][ T1153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 49.675610][ T1154] loop2: detected capacity change from 0 to 512 [ 49.687950][ T1154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.701107][ T814] EXT4-fs (loop3): unmounting filesystem. [ 49.701486][ T1154] EXT4-fs (loop2): invalid inodes per group: 1 [ 49.701486][ T1154] [ 49.744317][ T28] audit: type=1400 audit(3934351916.954:505): avc: denied { nlmsg_read } for pid=1156 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.766251][ T1160] binder: BINDER_SET_CONTEXT_MGR already set [ 49.773090][ T1158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.230'. [ 49.787956][ T1160] binder: 1157:1160 ioctl 4018620d 200000000040 returned -16 [ 49.822677][ T1163] loop1: detected capacity change from 0 to 512 [ 49.830012][ T1163] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.844213][ T1163] EXT4-fs (loop1): 1 truncate cleaned up [ 49.850164][ T1163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.138422][ T322] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.188429][ T1177] Invalid argument reading file caps for ./file0 [ 50.246133][ T1181] FAULT_INJECTION: forcing a failure. [ 50.246133][ T1181] name failslab, interval 1, probability 0, space 0, times 0 [ 50.259019][ T1181] CPU: 0 PID: 1181 Comm: syz.3.238 Not tainted syzkaller #0 [ 50.266355][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.276526][ T1181] Call Trace: [ 50.279835][ T1181] [ 50.282790][ T1181] __dump_stack+0x21/0x24 [ 50.287153][ T1181] dump_stack_lvl+0x110/0x170 [ 50.291867][ T1181] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.296986][ T1181] dump_stack+0x15/0x24 [ 50.301177][ T1181] should_fail_ex+0x3bf/0x510 [ 50.305885][ T1181] __should_failslab+0xac/0xf0 [ 50.310682][ T1181] should_failslab+0x9/0x20 [ 50.315215][ T1181] __kmem_cache_alloc_node+0x3d/0x2d0 [ 50.317363][ T1151] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 50.320616][ T1181] ? io_wq_create+0x38d/0xb70 [ 50.320653][ T1181] ? io_wq_create+0x38d/0xb70 [ 50.320676][ T1181] kmalloc_node_trace+0x26/0xb0 [ 50.343444][ T1181] ? __cfi_io_wq_submit_work+0x10/0x10 [ 50.349340][ T1181] io_wq_create+0x38d/0xb70 [ 50.353847][ T1181] ? __cfi_io_wq_create+0x10/0x10 [ 50.358875][ T1181] ? __kasan_kmalloc+0x95/0xb0 [ 50.363648][ T1181] ? io_uring_alloc_task_context+0x17f/0x540 [ 50.369637][ T1181] io_uring_alloc_task_context+0x296/0x540 [ 50.375452][ T1181] ? __cfi_io_uring_alloc_task_context+0x8/0x8 [ 50.381606][ T1181] ? __cfi_io_wq_submit_work+0x10/0x10 [ 50.387159][ T1181] ? __cfi_io_wq_free_work+0x10/0x10 [ 50.392445][ T1181] ? __cfi__raw_spin_lock+0x10/0x10 [ 50.397728][ T1181] ? security_inode_init_security_anon+0x95/0xc0 [ 50.404064][ T1181] __io_uring_add_tctx_node+0x349/0x4f0 [ 50.409633][ T1181] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 50.415720][ T1181] io_uring_install_fd+0x35/0x80 [ 50.420668][ T1181] io_uring_create+0x935/0xde1 [ 50.425435][ T1181] __x64_sys_io_uring_setup+0x21b/0x230 [ 50.430982][ T1181] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 50.437145][ T1181] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 50.443233][ T1181] x64_sys_call+0x4ab/0x9a0 [ 50.447749][ T1181] do_syscall_64+0x4c/0xa0 [ 50.452165][ T1181] ? clear_bhb_loop+0x30/0x80 [ 50.456926][ T1181] ? clear_bhb_loop+0x30/0x80 [ 50.461602][ T1181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.467505][ T1181] RIP: 0033:0x7f4fd419e0d9 [ 50.472005][ T1181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.491632][ T1181] RSP: 002b:00007f4fd5027ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 50.500049][ T1181] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4fd419e0d9 [ 50.508032][ T1181] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 50.516052][ T1181] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 50.524019][ T1181] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 50.531988][ T1181] R13: 0000000000000090 R14: 00007f4fd5027fd8 R15: 0000000000000000 [ 50.539969][ T1181] [ 50.545133][ T1151] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 50.554412][ T1151] F2FS-fs (loop4): invalid crc value [ 50.569671][ T322] usb 2-1: Using ep0 maxpacket: 16 [ 50.576718][ T1151] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.593964][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.609396][ T1186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.618547][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.618573][ T322] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.618609][ T322] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.618631][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.619276][ T322] usb 2-1: config 0 descriptor?? [ 50.664887][ T1151] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 50.672246][ T1151] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 50.683284][ T28] audit: type=1400 audit(3934351917.894:506): avc: denied { read write open } for pid=1150 comm="syz.4.226" path="/38/file1/bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.712453][ T814] EXT4-fs (loop3): unmounting filesystem. [ 50.728474][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.781983][ T1196] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.242: inode has both inline data and extents flags [ 50.798038][ T1196] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.242: couldn't read orphan inode 15 (err -117) [ 50.810139][ T1196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.838955][ T28] audit: type=1400 audit(3934351918.044:507): avc: denied { create } for pid=1195 comm="syz.3.242" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.928476][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 50.936611][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.946900][ T60] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 50.963729][ T1202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 50.964207][ T814] EXT4-fs (loop3): unmounting filesystem. [ 50.973569][ T60] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 50.987657][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.995925][ T60] usb 3-1: Product: syz [ 51.000434][ T60] usb 3-1: Manufacturer: syz [ 51.005064][ T60] usb 3-1: SerialNumber: syz [ 51.013396][ T1205] binder: BINDER_SET_CONTEXT_MGR already set [ 51.021065][ T1205] binder: 1204:1205 ioctl 4018620d 200000000040 returned -16 [ 51.044276][ T28] audit: type=1400 audit(3934351918.254:508): avc: denied { listen } for pid=1206 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.065065][ T28] audit: type=1400 audit(3934351918.254:509): avc: denied { accept } for pid=1206 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.088706][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.097086][ T1212] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 51.110061][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.119792][ T322] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 51.130130][ T322] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 51.147334][ T565] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.228555][ T60] usb 3-1: 1:1: invalid format type 0x1b02 is detected, processed as PCM [ 51.237082][ T60] usb 3-1: 1:1 : sample bitwidth 199 in over sample bytes 2 [ 51.245569][ T60] usb 3-1: 1:1: All rates were zero [ 51.251188][ T60] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 51.276313][ T60] usb 3-1: USB disconnect, device number 4 [ 51.336883][ T322] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 51.344970][ T322] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 51.356526][ T322] microsoft 0003:045E:07DA.0002: no inputs found [ 51.362901][ T322] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 51.374750][ T322] usb 2-1: USB disconnect, device number 7 [ 51.394388][ T1213] fido_id[1213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 51.677712][ T28] audit: type=1400 audit(3934351918.884:510): avc: denied { accept } for pid=1214 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 51.743447][ T1218] set_capacity_and_notify: 5 callbacks suppressed [ 51.743464][ T1218] loop4: detected capacity change from 0 to 1024 [ 51.760436][ T1218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.767339][ T1218] ext4: Bad value for 'max_batch_time' [ 51.774844][ T1222] FAULT_INJECTION: forcing a failure. [ 51.774844][ T1222] name failslab, interval 1, probability 0, space 0, times 0 [ 51.789186][ T1222] CPU: 1 PID: 1222 Comm: syz.2.249 Not tainted syzkaller #0 [ 51.796515][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.806591][ T1222] Call Trace: [ 51.809879][ T1222] [ 51.812822][ T1222] __dump_stack+0x21/0x24 [ 51.817158][ T1222] dump_stack_lvl+0x110/0x170 [ 51.821845][ T1222] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.826871][ T1222] dump_stack+0x15/0x24 [ 51.831043][ T1222] should_fail_ex+0x3bf/0x510 [ 51.835718][ T1222] __should_failslab+0xac/0xf0 [ 51.840484][ T1222] should_failslab+0x9/0x20 [ 51.844987][ T1222] __kmem_cache_alloc_node+0x3d/0x2d0 [ 51.850361][ T1222] ? io_wq_create+0x38d/0xb70 [ 51.855042][ T1222] ? io_wq_create+0x38d/0xb70 [ 51.859724][ T1222] kmalloc_node_trace+0x26/0xb0 [ 51.864574][ T1222] ? __cfi_io_wq_submit_work+0x10/0x10 [ 51.870041][ T1222] io_wq_create+0x38d/0xb70 [ 51.874639][ T1222] ? __cfi_io_wq_create+0x10/0x10 [ 51.879673][ T1222] ? __kasan_kmalloc+0x95/0xb0 [ 51.884439][ T1222] ? io_uring_alloc_task_context+0x17f/0x540 [ 51.890421][ T1222] io_uring_alloc_task_context+0x296/0x540 [ 51.896230][ T1222] ? __cfi_io_uring_alloc_task_context+0x8/0x8 [ 51.902384][ T1222] ? __cfi_io_wq_submit_work+0x10/0x10 [ 51.907858][ T1222] ? __cfi_io_wq_free_work+0x10/0x10 [ 51.913169][ T1222] ? __cfi__raw_spin_lock+0x10/0x10 [ 51.918385][ T1222] ? security_inode_init_security_anon+0x95/0xc0 [ 51.924719][ T1222] __io_uring_add_tctx_node+0x349/0x4f0 [ 51.930276][ T1222] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 51.936349][ T1222] io_uring_install_fd+0x35/0x80 [ 51.941295][ T1222] io_uring_create+0x935/0xde1 [ 51.946060][ T1222] __x64_sys_io_uring_setup+0x21b/0x230 [ 51.951699][ T1222] ? __cfi___x64_sys_io_uring_setup+0x10/0x10 [ 51.957778][ T1222] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.963854][ T1222] x64_sys_call+0x4ab/0x9a0 [ 51.968363][ T1222] do_syscall_64+0x4c/0xa0 [ 51.972799][ T1222] ? clear_bhb_loop+0x30/0x80 [ 51.977480][ T1222] ? clear_bhb_loop+0x30/0x80 [ 51.982150][ T1222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.988045][ T1222] RIP: 0033:0x7fa28eb9e0d9 [ 51.992455][ T1222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.012081][ T1222] RSP: 002b:00007fa28fa34ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 52.020492][ T1222] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fa28eb9e0d9 [ 52.028467][ T1222] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9 [ 52.036442][ T1222] RBP: 0000000000000000 R08: 00002000000003c0 R09: 0000000000000000 [ 52.044412][ T1222] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088 [ 52.052382][ T1222] R13: 0000000000000090 R14: 00007fa28fa34fd8 R15: 0000000000000000 [ 52.060455][ T1222] [ 52.075692][ T805] EXT4-fs (loop1): unmounting filesystem. [ 52.075723][ T1218] loop4: detected capacity change from 0 to 1024 [ 52.130394][ T28] audit: type=1400 audit(3934351919.344:511): avc: denied { getopt } for pid=1229 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.139699][ T1236] netlink: 'syz.3.253': attribute type 5 has an invalid length. [ 52.163525][ T1218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.174214][ T1236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 52.185682][ T1236] device ip6erspan0 entered promiscuous mode [ 52.194230][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 52.194992][ T1242] binder: 1240:1242 ioctl c0306201 0 returned -14 [ 52.230497][ T1242] binder: 1240:1242 ioctl c0306201 2000000003c0 returned -14 [ 52.235766][ T1248] loop2: detected capacity change from 0 to 512 [ 52.249521][ T770] EXT4-fs (loop4): unmounting filesystem. [ 52.249836][ T1248] EXT4-fs: dax option not supported [ 52.267974][ T28] audit: type=1400 audit(3934351919.474:512): avc: denied { sqpoll } for pid=1249 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.321341][ T319] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.333953][ T1258] loop4: detected capacity change from 0 to 512 [ 52.335580][ T1260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.349638][ T1258] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 52.488596][ T321] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 52.511301][ T1258] Bluetooth: ISO socket layer initialized [ 52.602830][ T460] logitech-hidpp-device 0005:046D:B012.0003: Device not connected [ 52.613917][ T1281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 52.647246][ T1286] binder: 1285:1286 ioctl c0306201 0 returned -14 [ 52.654492][ T1286] binder: 1285:1286 ioctl c0306201 2000000003c0 returned -14 [ 52.669170][ T321] usb 4-1: Using ep0 maxpacket: 32 [ 52.680916][ T321] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 52.693218][ T1291] xt_hashlimit: max too large, truncated to 1048576 [ 52.698249][ T321] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 52.709111][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.717263][ T321] usb 4-1: Product: syz [ 52.721543][ T321] usb 4-1: Manufacturer: syz [ 52.726254][ T321] usb 4-1: SerialNumber: syz [ 52.778687][ T1294] loop4: detected capacity change from 0 to 512 [ 52.789135][ T1294] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.800767][ T1294] EXT4-fs (loop4): 1 truncate cleaned up [ 52.806467][ T1294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.884471][ T770] EXT4-fs (loop4): unmounting filesystem. [ 52.936242][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.944888][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.948448][ T320] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 52.961822][ T321] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.968899][ T321] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 52.975751][ T321] usb 4-1: 0:3 : does not exist [ 52.980972][ T321] usb 4-1: 0:4 : does not exist [ 53.000224][ T321] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 53.010576][ T321] usb 4-1: USB disconnect, device number 3 [ 53.140240][ T320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.150536][ T320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.161789][ T320] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 53.171061][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.180368][ T320] usb 2-1: Product: syz [ 53.188445][ T320] usb 2-1: Manufacturer: syz [ 53.193386][ T320] usb 2-1: SerialNumber: syz [ 53.198482][ T460] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 53.219176][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.231005][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.242338][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.250170][ T1320] device bridge_slave_0 entered promiscuous mode [ 53.257391][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.264897][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.272739][ T1320] device bridge_slave_1 entered promiscuous mode [ 53.327542][ T1329] loop2: detected capacity change from 0 to 128 [ 53.334981][ T1329] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 53.399894][ T460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.434477][ T460] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 53.451005][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.501990][ T460] usb 5-1: config 0 descriptor?? [ 53.600173][ T319] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.600214][ T320] usb 2-1: unit 5 not found! [ 53.618455][ T1331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 53.631557][ T320] usb 2-1: USB disconnect, device number 8 [ 53.651372][ T565] udevd[565]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.654772][ T1334] binder: 1333:1334 ioctl c0306201 0 returned -14 [ 53.689295][ T1334] binder: 1333:1334 ioctl c0306201 2000000003c0 returned -14 [ 53.739651][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.747281][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.756737][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.765202][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.773439][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.780501][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.788083][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.797221][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.805976][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.814254][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.821336][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.834019][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.842386][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.852064][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.860619][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.875465][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.884967][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.898250][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.906509][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.915968][ T1320] device veth0_vlan entered promiscuous mode [ 53.922815][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.931109][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.943766][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.953417][ T1320] device veth1_macvtap entered promiscuous mode [ 53.963952][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.972403][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.978549][ T321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 53.987290][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.998971][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.076075][ T1338] device veth3 entered promiscuous mode [ 54.112299][ T1345] netlink: 'syz.2.284': attribute type 47 has an invalid length. [ 54.121185][ T460] usbhid 5-1:0.0: can't add hid device: -71 [ 54.132874][ T460] usbhid: probe of 5-1:0.0 failed with error -71 [ 54.135565][ T1348] syz.6.286 uses obsolete (PF_INET,SOCK_PACKET) [ 54.151973][ T460] usb 5-1: USB disconnect, device number 3 [ 54.171491][ T321] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 54.188939][ T321] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 54.198947][ T321] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.211284][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 54.226822][ T321] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 54.238258][ T1359] ------------[ cut here ]------------ [ 54.243749][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 54.254015][ T1359] Modules linked in: [ 54.257920][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Not tainted syzkaller #0 [ 54.265206][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.275269][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 54.281091][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 54.301222][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 54.307291][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 54.315783][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 54.323758][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 54.331733][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 54.339709][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 54.347769][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 54.356872][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.363571][ T1359] CR2: 00007fa28fa13ff8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 54.371685][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.379669][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.388829][ T1359] Call Trace: [ 54.392122][ T1359] [ 54.395066][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 54.400855][ T1359] ? __kasan_check_write+0x14/0x20 [ 54.406776][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 54.411479][ T1359] rb_buffer_peek+0x5f/0x930 [ 54.416079][ T1359] ring_buffer_peek+0x184/0x3b0 [ 54.420930][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 54.426300][ T1359] ? __kasan_check_write+0x14/0x20 [ 54.431424][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 54.436106][ T1359] ? _find_next_bit+0x8a/0x130 [ 54.440873][ T1359] __find_next_entry+0x33c/0x6c0 [ 54.445820][ T1359] ? trace_find_next_entry+0x380/0x380 [ 54.451295][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 54.456966][ T1359] ? print_trace_line+0x393/0x6b0 [ 54.462007][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 54.466957][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 54.472421][ T1359] vfs_read+0x286/0x930 [ 54.476581][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 54.481260][ T1359] ? __kasan_check_write+0x14/0x20 [ 54.486507][ T1359] ? mutex_lock+0x93/0x1b0 [ 54.490931][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 54.495795][ T1359] ? __fdget_pos+0x2cd/0x380 [ 54.500413][ T1359] ? ksys_read+0x70/0x260 [ 54.504744][ T1359] ksys_read+0x14a/0x260 [ 54.509073][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 54.513834][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 54.519475][ T1359] __x64_sys_read+0x7b/0x90 [ 54.523986][ T1359] x64_sys_call+0x2f/0x9a0 [ 54.528405][ T1359] do_syscall_64+0x4c/0xa0 [ 54.532912][ T1359] ? clear_bhb_loop+0x30/0x80 [ 54.537592][ T1359] ? clear_bhb_loop+0x30/0x80 [ 54.542273][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.548349][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 54.552785][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.572480][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.581234][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 54.589232][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 54.597212][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 54.605184][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.613158][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 54.621142][ T1359] [ 54.624158][ T1359] ---[ end trace 0000000000000000 ]--- [ 54.629652][ T1359] ================================================================== [ 54.637717][ T1359] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 54.644942][ T1359] Read of size 4 at addr ffff888166a1606d by task syz.2.289/1359 [ 54.652655][ T1359] [ 54.655070][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G W syzkaller #0 [ 54.663826][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.673882][ T1359] Call Trace: [ 54.677341][ T1359] [ 54.680280][ T1359] __dump_stack+0x21/0x24 [ 54.684706][ T1359] dump_stack_lvl+0x110/0x170 [ 54.689388][ T1359] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.694414][ T1359] ? rb_get_reader_page+0x9f6/0xc60 [ 54.699613][ T1359] ? rb_buffer_peek+0x88d/0x930 [ 54.704479][ T1359] print_address_description+0x71/0x200 [ 54.710287][ T1359] print_report+0x4a/0x60 [ 54.714618][ T1359] kasan_report+0x122/0x150 [ 54.719128][ T1359] ? rb_buffer_peek+0x88d/0x930 [ 54.724172][ T1359] ? __kasan_check_write+0x14/0x20 [ 54.729314][ T1359] __asan_report_load4_noabort+0x14/0x20 [ 54.734990][ T1359] rb_buffer_peek+0x88d/0x930 [ 54.739672][ T1359] ring_buffer_peek+0x184/0x3b0 [ 54.744527][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 54.749901][ T1359] ? __kasan_check_write+0x14/0x20 [ 54.755020][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 54.759702][ T1359] ? _find_next_bit+0x8a/0x130 [ 54.764471][ T1359] __find_next_entry+0x33c/0x6c0 [ 54.769421][ T1359] ? trace_find_next_entry+0x380/0x380 [ 54.774891][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 54.780524][ T1359] ? print_trace_line+0x393/0x6b0 [ 54.785555][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 54.790505][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 54.795999][ T1359] vfs_read+0x286/0x930 [ 54.800155][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 54.804836][ T1359] ? __kasan_check_write+0x14/0x20 [ 54.809948][ T1359] ? mutex_lock+0x93/0x1b0 [ 54.814378][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 54.819264][ T1359] ? __fdget_pos+0x2cd/0x380 [ 54.823856][ T1359] ? ksys_read+0x70/0x260 [ 54.828186][ T1359] ksys_read+0x14a/0x260 [ 54.832426][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 54.837195][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 54.842828][ T1359] __x64_sys_read+0x7b/0x90 [ 54.847336][ T1359] x64_sys_call+0x2f/0x9a0 [ 54.851770][ T1359] do_syscall_64+0x4c/0xa0 [ 54.856283][ T1359] ? clear_bhb_loop+0x30/0x80 [ 54.860965][ T1359] ? clear_bhb_loop+0x30/0x80 [ 54.866163][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.872074][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 54.876597][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.896209][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.904636][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 54.912607][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 54.920580][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 54.928548][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.936520][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 54.944718][ T1359] [ 54.947761][ T1359] [ 54.950092][ T1359] The buggy address belongs to the physical page: [ 54.956509][ T1359] page:ffffea00059a8580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x166a16 [ 54.966750][ T1359] flags: 0x4000000000000000(zone=1) [ 54.971961][ T1359] raw: 4000000000000000 ffffea00059a8588 ffffea00059a8588 0000000000000000 [ 54.980625][ T1359] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 54.989201][ T1359] page dumped because: kasan: bad access detected [ 54.995624][ T1359] page_owner info is not present (never set?) [ 55.001684][ T1359] [ 55.004018][ T1359] Memory state around the buggy address: [ 55.009651][ T1359] ffff888166a15f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.017723][ T1359] ffff888166a15f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.025783][ T1359] >ffff888166a16000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.033935][ T1359] ^ [ 55.041411][ T1359] ffff888166a16080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.049909][ T1359] ffff888166a16100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.057964][ T1359] ================================================================== [ 55.066025][ T1359] Disabling lock debugging due to kernel taint [ 55.074493][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 55.080037][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.084504][ T28] audit: type=1400 audit(3934351921.454:523): avc: denied { map } for pid=1353 comm="syz.2.289" path="/43/debug/tracing/events/kvm/enable" dev="tracefs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 55.092714][ T321] usb 4-1: Product: syz [ 55.122914][ T1358] binder: 1357:1358 ioctl c0306201 2000000003c0 returned -14 [ 55.124426][ T321] usb 4-1: Manufacturer: syz [ 55.135864][ T321] usb 4-1: SerialNumber: syz [ 55.140572][ T28] audit: type=1400 audit(3934351922.294:524): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 55.140631][ T28] audit: type=1400 audit(3934351922.294:525): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.140655][ T28] audit: type=1400 audit(3934351922.294:526): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.168764][ T321] usb-storage 4-1:1.0: USB Mass Storage device detected [ 55.219508][ T321] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 55.229512][ T28] audit: type=1400 audit(3934351922.294:527): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.229974][ T1359] ------------[ cut here ]------------ [ 55.256297][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 55.257828][ T28] audit: type=1400 audit(3934351922.294:528): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.266567][ T1359] Modules linked in: [ 55.266581][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 55.266602][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.266613][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 55.287374][ T28] audit: type=1400 audit(3934351922.294:529): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.290887][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 55.290906][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010002 [ 55.299878][ T28] audit: type=1400 audit(3934351922.294:530): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.309704][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 55.309722][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 55.309736][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 55.309750][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 55.309763][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 55.309778][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.309794][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.309809][ T1359] CR2: 00007f4fd41eb7c0 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 55.317471][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.338567][ T1359] Call Trace: [ 55.338580][ T1359] [ 55.338589][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 55.338621][ T1359] ? __kasan_check_write+0x14/0x20 [ 55.475698][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 55.480562][ T1359] rb_buffer_peek+0x5f/0x930 [ 55.485381][ T1359] ring_buffer_consume+0x1aa/0x370 [ 55.490501][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 55.496133][ T1359] ? print_trace_line+0x393/0x6b0 [ 55.501147][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 55.506089][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 55.511680][ T1359] vfs_read+0x286/0x930 [ 55.515835][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 55.520515][ T1359] ? __kasan_check_write+0x14/0x20 [ 55.525662][ T1359] ? mutex_lock+0x93/0x1b0 [ 55.528429][ T24] usb 7-1: device descriptor read/64, error -71 [ 55.530075][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 55.530106][ T1359] ? __fdget_pos+0x2cd/0x380 [ 55.545760][ T1359] ? ksys_read+0x70/0x260 [ 55.550256][ T1359] ksys_read+0x14a/0x260 [ 55.554577][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 55.559331][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 55.565044][ T1359] __x64_sys_read+0x7b/0x90 [ 55.569552][ T1359] x64_sys_call+0x2f/0x9a0 [ 55.574057][ T1359] do_syscall_64+0x4c/0xa0 [ 55.578477][ T1359] ? clear_bhb_loop+0x30/0x80 [ 55.583230][ T1359] ? clear_bhb_loop+0x30/0x80 [ 55.587912][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.593836][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 55.598241][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.617855][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.626440][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 55.634472][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 55.642451][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 55.650423][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.658388][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 55.666446][ T1359] [ 55.669457][ T1359] ---[ end trace 0000000000000000 ]--- [ 55.675214][ T1359] ------------[ cut here ]------------ [ 55.680669][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 55.690934][ T1359] Modules linked in: [ 55.694819][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 55.703672][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.713719][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 55.719609][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 55.739313][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 55.745389][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 55.753362][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 55.761334][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 55.769308][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 55.777369][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 55.785343][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.794280][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.800860][ T1359] CR2: 00007f4fd41eb7c0 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 55.808831][ T1359] Call Trace: [ 55.812107][ T1359] [ 55.815041][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 55.820788][ T1359] rb_advance_reader+0x2b/0x770 [ 55.825642][ T1359] ring_buffer_consume+0x1e7/0x370 [ 55.830750][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 55.836388][ T1359] ? print_trace_line+0x393/0x6b0 [ 55.841677][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 55.846626][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 55.852088][ T1359] vfs_read+0x286/0x930 [ 55.856341][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 55.861017][ T1359] ? __kasan_check_write+0x14/0x20 [ 55.866133][ T1359] ? mutex_lock+0x93/0x1b0 [ 55.870554][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 55.875494][ T1359] ? __fdget_pos+0x2cd/0x380 [ 55.880097][ T1359] ? ksys_read+0x70/0x260 [ 55.884449][ T1359] ksys_read+0x14a/0x260 [ 55.888707][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 55.893475][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 55.899129][ T1359] __x64_sys_read+0x7b/0x90 [ 55.903632][ T1359] x64_sys_call+0x2f/0x9a0 [ 55.908055][ T1359] do_syscall_64+0x4c/0xa0 [ 55.912473][ T1359] ? clear_bhb_loop+0x30/0x80 [ 55.917145][ T1359] ? clear_bhb_loop+0x30/0x80 [ 55.921820][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.927719][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 55.932130][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.951744][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.960159][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 55.968134][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 55.976155][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 55.984131][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.992106][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 56.000076][ T1359] [ 56.003089][ T1359] ---[ end trace 0000000000000000 ]--- [ 56.009486][ T321] scsi host1: usb-storage 4-1:1.0 [ 56.009726][ T1359] ------------[ cut here ]------------ [ 56.019996][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 56.030270][ T1359] Modules linked in: [ 56.034182][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 56.042941][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.052998][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 56.059249][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 56.078855][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 56.084956][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 56.092966][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.100951][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 56.109099][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 56.117244][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 56.125410][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 56.134516][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.141101][ T1359] CR2: 00007f65bb3ef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 56.149508][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.157755][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.165809][ T1359] Call Trace: [ 56.169090][ T1359] [ 56.172023][ T1359] ? __kasan_check_write+0x14/0x20 [ 56.177149][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 56.183236][ T1359] ? __kasan_check_write+0x14/0x20 [ 56.188468][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 56.193158][ T1359] rb_buffer_peek+0x5f/0x930 [ 56.197753][ T1359] ring_buffer_peek+0x184/0x3b0 [ 56.202622][ T1359] ? __kasan_check_read+0x11/0x20 [ 56.207646][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 56.213024][ T1359] ? _find_next_bit+0x8a/0x130 [ 56.217807][ T1359] __find_next_entry+0x33c/0x6c0 [ 56.222773][ T1359] ? trace_find_next_entry+0x380/0x380 [ 56.228243][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 56.233989][ T1359] ? print_trace_line+0x393/0x6b0 [ 56.239101][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 56.244041][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 56.249506][ T1359] vfs_read+0x286/0x930 [ 56.253747][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 56.258597][ T1359] ? __kasan_check_write+0x14/0x20 [ 56.263704][ T1359] ? mutex_lock+0x93/0x1b0 [ 56.268125][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 56.273069][ T1359] ? __fdget_pos+0x2cd/0x380 [ 56.277920][ T1359] ? ksys_read+0x70/0x260 [ 56.282245][ T1359] ksys_read+0x14a/0x260 [ 56.286484][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 56.291253][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 56.296886][ T1359] __x64_sys_read+0x7b/0x90 [ 56.301387][ T1359] x64_sys_call+0x2f/0x9a0 [ 56.305893][ T1359] do_syscall_64+0x4c/0xa0 [ 56.310314][ T1359] ? clear_bhb_loop+0x30/0x80 [ 56.314989][ T1359] ? clear_bhb_loop+0x30/0x80 [ 56.319665][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.325562][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 56.329976][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.349583][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.358087][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 56.366065][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 56.374132][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 56.382106][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.390096][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 56.398087][ T1359] [ 56.401102][ T1359] ---[ end trace 0000000000000000 ]--- [ 56.413034][ T1359] ------------[ cut here ]------------ [ 56.418534][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 56.420188][ T24] usb 7-1: device descriptor read/64, error -71 [ 56.428810][ T1359] Modules linked in: [ 56.428827][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 56.428849][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.428861][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 56.463620][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 56.483432][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 56.489660][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 56.497667][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.505671][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 56.513682][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 56.521742][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 56.529748][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.538704][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.545322][ T1359] CR2: 0000000000000000 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 56.553327][ T1359] Call Trace: [ 56.556660][ T1359] [ 56.559693][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 56.565368][ T1359] ? __kasan_check_write+0x14/0x20 [ 56.570513][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 56.575226][ T1359] rb_buffer_peek+0x5f/0x930 [ 56.579845][ T1359] ring_buffer_consume+0x1aa/0x370 [ 56.585023][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 56.590683][ T1359] ? print_trace_line+0x393/0x6b0 [ 56.595769][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 56.600830][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 56.606335][ T1359] vfs_read+0x286/0x930 [ 56.610518][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 56.615218][ T1359] ? __kasan_check_write+0x14/0x20 [ 56.620366][ T1359] ? mutex_lock+0x93/0x1b0 [ 56.624818][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 56.629720][ T1359] ? __fdget_pos+0x2cd/0x380 [ 56.634346][ T1359] ? ksys_read+0x70/0x260 [ 56.638794][ T1359] ksys_read+0x14a/0x260 [ 56.643065][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 56.647864][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 56.653611][ T1359] __x64_sys_read+0x7b/0x90 [ 56.658122][ T1359] x64_sys_call+0x2f/0x9a0 [ 56.662538][ T1359] do_syscall_64+0x4c/0xa0 [ 56.666986][ T1359] ? clear_bhb_loop+0x30/0x80 [ 56.671660][ T1359] ? clear_bhb_loop+0x30/0x80 [ 56.676350][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.682559][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 56.687080][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.706872][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.715295][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 56.723270][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 56.731238][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 56.739210][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.747274][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 56.755246][ T1359] [ 56.758533][ T1359] ---[ end trace 0000000000000000 ]--- [ 56.764058][ T1359] ------------[ cut here ]------------ [ 56.769516][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 56.779767][ T1359] Modules linked in: [ 56.783664][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 56.792462][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.802538][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 56.808362][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 56.827990][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 56.834099][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 56.842074][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 56.850130][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 56.858132][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 56.866102][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 56.874160][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.883093][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.889671][ T1359] CR2: 0000000000000000 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 56.897649][ T1359] Call Trace: [ 56.900923][ T1359] [ 56.903859][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 56.909497][ T1359] rb_advance_reader+0x2b/0x770 [ 56.914349][ T1359] ring_buffer_consume+0x1e7/0x370 [ 56.919456][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 56.925085][ T1359] ? print_trace_line+0x393/0x6b0 [ 56.930108][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 56.935048][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 56.940503][ T1359] vfs_read+0x286/0x930 [ 56.944746][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 56.949416][ T1359] ? __kasan_check_write+0x14/0x20 [ 56.954528][ T1359] ? mutex_lock+0x93/0x1b0 [ 56.958949][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 56.963810][ T1359] ? __fdget_pos+0x2cd/0x380 [ 56.968401][ T1359] ? ksys_read+0x70/0x260 [ 56.972734][ T1359] ksys_read+0x14a/0x260 [ 56.976975][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 56.981740][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 56.987372][ T1359] __x64_sys_read+0x7b/0x90 [ 56.991875][ T1359] x64_sys_call+0x2f/0x9a0 [ 56.996294][ T1359] do_syscall_64+0x4c/0xa0 [ 57.000712][ T1359] ? clear_bhb_loop+0x30/0x80 [ 57.005388][ T1359] ? clear_bhb_loop+0x30/0x80 [ 57.010061][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.015957][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 57.020373][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.039983][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.048396][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 57.056376][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 57.064431][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 57.072576][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.080564][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 57.088538][ T1359] [ 57.091555][ T1359] ---[ end trace 0000000000000000 ]--- [ 57.097685][ T1359] ------------[ cut here ]------------ [ 57.103167][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 57.113442][ T1359] Modules linked in: [ 57.117359][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 57.126151][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.136235][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 57.142109][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 57.161745][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 57.167838][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 57.175845][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.183841][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.191841][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 57.195790][ T321] usb 4-1: USB disconnect, device number 4 [ 57.199943][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 57.199962][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.199981][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.199994][ T1359] CR2: 00007f4fd43ef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 57.237311][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.245300][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.253290][ T1359] Call Trace: [ 57.256587][ T1359] [ 57.259528][ T1359] ? __kasan_check_write+0x14/0x20 [ 57.264666][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 57.270309][ T1359] ? __kasan_check_write+0x14/0x20 [ 57.275439][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 57.280144][ T1359] rb_buffer_peek+0x5f/0x930 [ 57.284744][ T1359] ring_buffer_peek+0x184/0x3b0 [ 57.289600][ T1359] ? __kasan_check_read+0x11/0x20 [ 57.294626][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 57.299999][ T1359] ? _find_next_bit+0x8a/0x130 [ 57.304760][ T1359] __find_next_entry+0x33c/0x6c0 [ 57.309704][ T1359] ? trace_find_next_entry+0x380/0x380 [ 57.315171][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 57.320805][ T1359] ? print_trace_line+0x393/0x6b0 [ 57.325871][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 57.330909][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 57.336369][ T1359] vfs_read+0x286/0x930 [ 57.340527][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 57.345203][ T1359] ? __kasan_check_write+0x14/0x20 [ 57.350313][ T1359] ? mutex_lock+0x93/0x1b0 [ 57.354735][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 57.359591][ T1359] ? __fdget_pos+0x2cd/0x380 [ 57.364193][ T1359] ? ksys_read+0x70/0x260 [ 57.368520][ T1359] ksys_read+0x14a/0x260 [ 57.372799][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 57.377561][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 57.383201][ T1359] __x64_sys_read+0x7b/0x90 [ 57.387723][ T1359] x64_sys_call+0x2f/0x9a0 [ 57.392161][ T1359] do_syscall_64+0x4c/0xa0 [ 57.396594][ T1359] ? clear_bhb_loop+0x30/0x80 [ 57.401277][ T1359] ? clear_bhb_loop+0x30/0x80 [ 57.405955][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.411877][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 57.416291][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.435900][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.444402][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 57.452379][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 57.460438][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 57.468436][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.476410][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 57.484383][ T1359] [ 57.487394][ T1359] ---[ end trace 0000000000000000 ]--- [ 57.496536][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.520988][ T1359] ------------[ cut here ]------------ [ 57.526494][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 57.536768][ T1359] Modules linked in: [ 57.540684][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 57.549468][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.559549][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 57.565403][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 57.585208][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010002 [ 57.591333][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 57.599562][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.607527][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.615490][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 57.623451][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 57.631421][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.640350][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.646932][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 57.654984][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.662961][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.670922][ T1359] Call Trace: [ 57.674198][ T1359] [ 57.677122][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 57.682751][ T1359] ? __kasan_check_write+0x14/0x20 [ 57.687855][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 57.692526][ T1359] rb_buffer_peek+0x5f/0x930 [ 57.697104][ T1359] ring_buffer_consume+0x1aa/0x370 [ 57.702213][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 57.707836][ T1359] ? print_trace_line+0x393/0x6b0 [ 57.712869][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 57.717807][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 57.723612][ T1359] vfs_read+0x286/0x930 [ 57.727856][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 57.732527][ T1359] ? __kasan_check_write+0x14/0x20 [ 57.737646][ T1359] ? mutex_lock+0x93/0x1b0 [ 57.742070][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 57.746940][ T1359] ? __fdget_pos+0x2cd/0x380 [ 57.751546][ T1359] ? ksys_read+0x70/0x260 [ 57.755885][ T1359] ksys_read+0x14a/0x260 [ 57.760324][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 57.765087][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 57.770720][ T1359] __x64_sys_read+0x7b/0x90 [ 57.775224][ T1359] x64_sys_call+0x2f/0x9a0 [ 57.779635][ T1359] do_syscall_64+0x4c/0xa0 [ 57.784098][ T1359] ? clear_bhb_loop+0x30/0x80 [ 57.788766][ T1359] ? clear_bhb_loop+0x30/0x80 [ 57.793605][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.799494][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 57.803920][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.823517][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.832012][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 57.840082][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 57.848065][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 57.856032][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.863999][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 57.871974][ T1359] [ 57.874982][ T1359] ---[ end trace 0000000000000000 ]--- [ 57.880462][ T1359] ------------[ cut here ]------------ [ 57.885929][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 57.896178][ T1359] Modules linked in: [ 57.900251][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 57.908998][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.919059][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 57.924872][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 57.944567][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 57.950626][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 57.958592][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 57.966551][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 57.974511][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 57.982469][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 57.990516][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.999457][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.006033][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 58.013999][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.021967][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.029930][ T1359] Call Trace: [ 58.033201][ T1359] [ 58.036125][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 58.041760][ T1359] rb_advance_reader+0x2b/0x770 [ 58.047143][ T1359] ring_buffer_consume+0x1e7/0x370 [ 58.052299][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 58.057959][ T1359] ? print_trace_line+0x393/0x6b0 [ 58.063169][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 58.068112][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 58.073601][ T1359] vfs_read+0x286/0x930 [ 58.077844][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 58.082513][ T1359] ? __kasan_check_write+0x14/0x20 [ 58.087627][ T1359] ? mutex_lock+0x93/0x1b0 [ 58.092048][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 58.096979][ T1359] ? __fdget_pos+0x2cd/0x380 [ 58.101559][ T1359] ? ksys_read+0x70/0x260 [ 58.105880][ T1359] ksys_read+0x14a/0x260 [ 58.110111][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 58.114882][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 58.120528][ T1359] __x64_sys_read+0x7b/0x90 [ 58.125051][ T1359] x64_sys_call+0x2f/0x9a0 [ 58.129460][ T1359] do_syscall_64+0x4c/0xa0 [ 58.133875][ T1359] ? clear_bhb_loop+0x30/0x80 [ 58.138549][ T1359] ? clear_bhb_loop+0x30/0x80 [ 58.143225][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.149139][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 58.153543][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.173160][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.181573][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 58.189556][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 58.197705][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 58.205686][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.213674][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 58.221660][ T1359] [ 58.224670][ T1359] ---[ end trace 0000000000000000 ]--- [ 58.236233][ T1359] ------------[ cut here ]------------ [ 58.241725][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 58.251989][ T1359] Modules linked in: [ 58.255882][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 58.264624][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.274755][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 58.280555][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 58.300148][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010006 [ 58.306307][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 58.314382][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 58.322357][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 58.330325][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 58.338306][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 58.346268][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.355186][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.361781][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 58.369744][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.378497][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.386490][ T1359] Call Trace: [ 58.389759][ T1359] [ 58.392705][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 58.398331][ T1359] ? __kasan_check_write+0x14/0x20 [ 58.403446][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 58.408141][ T1359] rb_buffer_peek+0x5f/0x930 [ 58.412717][ T1359] ring_buffer_peek+0x184/0x3b0 [ 58.417552][ T1359] ? __kasan_check_read+0x11/0x20 [ 58.422563][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 58.427925][ T1359] ? _find_next_bit+0x8a/0x130 [ 58.432678][ T1359] __find_next_entry+0x33c/0x6c0 [ 58.437610][ T1359] ? trace_find_next_entry+0x380/0x380 [ 58.443057][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 58.448679][ T1359] ? print_trace_line+0x393/0x6b0 [ 58.453690][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 58.458879][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 58.464332][ T1359] vfs_read+0x286/0x930 [ 58.468533][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 58.473199][ T1359] ? __kasan_check_write+0x14/0x20 [ 58.478306][ T1359] ? mutex_lock+0x93/0x1b0 [ 58.482720][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 58.487564][ T1359] ? __fdget_pos+0x2cd/0x380 [ 58.492146][ T1359] ? ksys_read+0x70/0x260 [ 58.496461][ T1359] ksys_read+0x14a/0x260 [ 58.500688][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 58.505436][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 58.511062][ T1359] __x64_sys_read+0x7b/0x90 [ 58.515592][ T1359] x64_sys_call+0x2f/0x9a0 [ 58.520026][ T1359] do_syscall_64+0x4c/0xa0 [ 58.524447][ T1359] ? clear_bhb_loop+0x30/0x80 [ 58.529116][ T1359] ? clear_bhb_loop+0x30/0x80 [ 58.533793][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.539675][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 58.544076][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.563671][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.572088][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 58.580080][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 58.588080][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 58.596051][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.604018][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 58.611988][ T1359] [ 58.615015][ T1359] ---[ end trace 0000000000000000 ]--- [ 58.620945][ T1359] ------------[ cut here ]------------ [ 58.626543][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 58.636778][ T1359] Modules linked in: [ 58.640669][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 58.649425][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.659477][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 58.665302][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 58.684901][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010002 [ 58.690982][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 58.698946][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 58.706911][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 58.714871][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 58.722843][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 58.730822][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.739763][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.746436][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 58.754679][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.762740][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.770714][ T1359] Call Trace: [ 58.774091][ T1359] [ 58.777038][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 58.782727][ T1359] ? __kasan_check_write+0x14/0x20 [ 58.788288][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 58.792973][ T1359] rb_buffer_peek+0x5f/0x930 [ 58.797655][ T1359] ring_buffer_consume+0x1aa/0x370 [ 58.802767][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 58.808398][ T1359] ? print_trace_line+0x393/0x6b0 [ 58.813421][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 58.818366][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 58.823839][ T1359] vfs_read+0x286/0x930 [ 58.827994][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 58.832673][ T1359] ? __kasan_check_write+0x14/0x20 [ 58.837789][ T1359] ? mutex_lock+0x93/0x1b0 [ 58.842213][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 58.847088][ T1359] ? __fdget_pos+0x2cd/0x380 [ 58.851708][ T1359] ? ksys_read+0x70/0x260 [ 58.856055][ T1359] ksys_read+0x14a/0x260 [ 58.860354][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 58.865231][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 58.870909][ T1359] __x64_sys_read+0x7b/0x90 [ 58.875421][ T1359] x64_sys_call+0x2f/0x9a0 [ 58.879844][ T1359] do_syscall_64+0x4c/0xa0 [ 58.884274][ T1359] ? clear_bhb_loop+0x30/0x80 [ 58.889062][ T1359] ? clear_bhb_loop+0x30/0x80 [ 58.893781][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.899693][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 58.904130][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.923756][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.932229][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 58.940226][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 58.948213][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 58.956214][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.964299][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 58.972376][ T1359] [ 58.975408][ T1359] ---[ end trace 0000000000000000 ]--- [ 58.981013][ T1359] ------------[ cut here ]------------ [ 58.986477][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 58.996736][ T1359] Modules linked in: [ 59.000650][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 59.009409][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.019507][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 59.025324][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 59.044931][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 59.051007][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 59.059066][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.067213][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.075715][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 59.083686][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 59.091658][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.100600][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.107221][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 59.115303][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.123285][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.131260][ T1359] Call Trace: [ 59.135336][ T1359] [ 59.138379][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 59.144023][ T1359] rb_advance_reader+0x2b/0x770 [ 59.148875][ T1359] ring_buffer_consume+0x1e7/0x370 [ 59.153998][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 59.159629][ T1359] ? print_trace_line+0x393/0x6b0 [ 59.164739][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 59.169682][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 59.175143][ T1359] vfs_read+0x286/0x930 [ 59.179303][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 59.183986][ T1359] ? __kasan_check_write+0x14/0x20 [ 59.189101][ T1359] ? mutex_lock+0x93/0x1b0 [ 59.193531][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 59.198389][ T1359] ? __fdget_pos+0x2cd/0x380 [ 59.202985][ T1359] ? ksys_read+0x70/0x260 [ 59.207312][ T1359] ksys_read+0x14a/0x260 [ 59.211575][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 59.216343][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 59.221989][ T1359] __x64_sys_read+0x7b/0x90 [ 59.226503][ T1359] x64_sys_call+0x2f/0x9a0 [ 59.230928][ T1359] do_syscall_64+0x4c/0xa0 [ 59.235361][ T1359] ? clear_bhb_loop+0x30/0x80 [ 59.240071][ T1359] ? clear_bhb_loop+0x30/0x80 [ 59.244745][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.250644][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 59.255060][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.274671][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.283089][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 59.291147][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 59.299117][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 59.307088][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.315056][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 59.323032][ T1359] [ 59.326047][ T1359] ---[ end trace 0000000000000000 ]--- [ 59.333728][ T1359] ------------[ cut here ]------------ [ 59.339300][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 59.349711][ T1359] Modules linked in: [ 59.353597][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 59.362343][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.372492][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 59.378294][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 59.397984][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 59.404054][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 59.412120][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.420089][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.428062][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 59.436024][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 59.443987][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.452906][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.459483][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 59.467449][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.475421][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.483391][ T1359] Call Trace: [ 59.486661][ T1359] [ 59.489591][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 59.495222][ T1359] ? __kasan_check_write+0x14/0x20 [ 59.500327][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 59.504998][ T1359] rb_buffer_peek+0x5f/0x930 [ 59.509610][ T1359] ring_buffer_peek+0x184/0x3b0 [ 59.514477][ T1359] ? __kasan_check_read+0x11/0x20 [ 59.519493][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 59.525049][ T1359] ? _find_next_bit+0x8a/0x130 [ 59.529806][ T1359] __find_next_entry+0x33c/0x6c0 [ 59.534739][ T1359] ? trace_find_next_entry+0x380/0x380 [ 59.540316][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 59.545961][ T1359] ? print_trace_line+0x393/0x6b0 [ 59.550994][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 59.555932][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 59.561391][ T1359] vfs_read+0x286/0x930 [ 59.565547][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 59.570215][ T1359] ? __kasan_check_write+0x14/0x20 [ 59.575339][ T1359] ? mutex_lock+0x93/0x1b0 [ 59.579749][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 59.584595][ T1359] ? __fdget_pos+0x2cd/0x380 [ 59.589176][ T1359] ? ksys_read+0x70/0x260 [ 59.593497][ T1359] ksys_read+0x14a/0x260 [ 59.597728][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 59.602485][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 59.608130][ T1359] __x64_sys_read+0x7b/0x90 [ 59.612621][ T1359] x64_sys_call+0x2f/0x9a0 [ 59.617040][ T1359] do_syscall_64+0x4c/0xa0 [ 59.621471][ T1359] ? clear_bhb_loop+0x30/0x80 [ 59.626151][ T1359] ? clear_bhb_loop+0x30/0x80 [ 59.630834][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.636746][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 59.641162][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.660769][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.669273][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 59.677248][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 59.685391][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 59.693530][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.701498][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 59.709495][ T1359] [ 59.712505][ T1359] ---[ end trace 0000000000000000 ]--- [ 59.719348][ T1359] ------------[ cut here ]------------ [ 59.724824][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 59.735084][ T1359] Modules linked in: [ 59.739131][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 59.747927][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.757983][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 59.763802][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 59.783490][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010002 [ 59.789633][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 59.797788][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 59.805749][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 59.813714][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 59.821681][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 59.829653][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.838580][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.845185][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 59.853152][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.861142][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.869118][ T1359] Call Trace: [ 59.872390][ T1359] [ 59.875311][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 59.880952][ T1359] ? __kasan_check_write+0x14/0x20 [ 59.886051][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 59.890719][ T1359] rb_buffer_peek+0x5f/0x930 [ 59.895316][ T1359] ring_buffer_consume+0x1aa/0x370 [ 59.900433][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 59.906056][ T1359] ? print_trace_line+0x393/0x6b0 [ 59.911088][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 59.916030][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 59.921480][ T1359] vfs_read+0x286/0x930 [ 59.925625][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 59.930291][ T1359] ? __kasan_check_write+0x14/0x20 [ 59.935406][ T1359] ? mutex_lock+0x93/0x1b0 [ 59.939815][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 59.944656][ T1359] ? __fdget_pos+0x2cd/0x380 [ 59.949240][ T1359] ? ksys_read+0x70/0x260 [ 59.953574][ T1359] ksys_read+0x14a/0x260 [ 59.957826][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 59.962576][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 59.968202][ T1359] __x64_sys_read+0x7b/0x90 [ 59.972692][ T1359] x64_sys_call+0x2f/0x9a0 [ 59.977108][ T1359] do_syscall_64+0x4c/0xa0 [ 59.981529][ T1359] ? clear_bhb_loop+0x30/0x80 [ 59.986199][ T1359] ? clear_bhb_loop+0x30/0x80 [ 59.990870][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.996773][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 60.001183][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.020798][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.029223][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 60.037186][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 60.045150][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.053208][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.061291][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 60.069277][ T1359] [ 60.072297][ T1359] ---[ end trace 0000000000000000 ]--- [ 60.077779][ T1359] ------------[ cut here ]------------ [ 60.083234][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 60.093562][ T1359] Modules linked in: [ 60.097447][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 60.106192][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.116243][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 60.122072][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 60.141929][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 60.148006][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 60.155975][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.163950][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.171917][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 60.179916][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 60.187967][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 60.196901][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.203478][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 60.211477][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.219438][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.227400][ T1359] Call Trace: [ 60.230808][ T1359] [ 60.233734][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 60.239363][ T1359] rb_advance_reader+0x2b/0x770 [ 60.244291][ T1359] ring_buffer_consume+0x1e7/0x370 [ 60.249390][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 60.255010][ T1359] ? print_trace_line+0x393/0x6b0 [ 60.260022][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 60.264955][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 60.270405][ T1359] vfs_read+0x286/0x930 [ 60.274567][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 60.279234][ T1359] ? __kasan_check_write+0x14/0x20 [ 60.284334][ T1359] ? mutex_lock+0x93/0x1b0 [ 60.288744][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 60.293613][ T1359] ? __fdget_pos+0x2cd/0x380 [ 60.298195][ T1359] ? ksys_read+0x70/0x260 [ 60.302518][ T1359] ksys_read+0x14a/0x260 [ 60.306806][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 60.311560][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 60.317185][ T1359] __x64_sys_read+0x7b/0x90 [ 60.321695][ T1359] x64_sys_call+0x2f/0x9a0 [ 60.326103][ T1359] do_syscall_64+0x4c/0xa0 [ 60.330529][ T1359] ? clear_bhb_loop+0x30/0x80 [ 60.335288][ T1359] ? clear_bhb_loop+0x30/0x80 [ 60.339957][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.345935][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 60.350358][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.370130][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.378543][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 60.386606][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 60.394575][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.402643][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.410604][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 60.418568][ T1359] [ 60.421579][ T1359] ---[ end trace 0000000000000000 ]--- [ 60.427984][ T1359] ------------[ cut here ]------------ [ 60.433453][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 60.443708][ T1359] Modules linked in: [ 60.447680][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 60.456424][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.466553][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 60.472352][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 60.492059][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010012 [ 60.498117][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 60.506095][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.514057][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.522027][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 60.530091][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 60.538055][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 60.546974][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.553546][ T1359] CR2: 00007f15fbbef2f8 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 60.561605][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.569592][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.577552][ T1359] Call Trace: [ 60.580822][ T1359] [ 60.583748][ T1359] ? __kasan_check_write+0x14/0x20 [ 60.588941][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 60.594568][ T1359] ? __kasan_check_write+0x14/0x20 [ 60.599669][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 60.604347][ T1359] rb_buffer_peek+0x5f/0x930 [ 60.608935][ T1359] ring_buffer_peek+0x184/0x3b0 [ 60.613775][ T1359] ? __kasan_check_read+0x11/0x20 [ 60.618794][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 60.624154][ T1359] ? _find_next_bit+0x8a/0x130 [ 60.628912][ T1359] __find_next_entry+0x33c/0x6c0 [ 60.633844][ T1359] ? trace_find_next_entry+0x380/0x380 [ 60.639384][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 60.645008][ T1359] ? print_trace_line+0x393/0x6b0 [ 60.650024][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 60.654956][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 60.660416][ T1359] vfs_read+0x286/0x930 [ 60.664563][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 60.669230][ T1359] ? __kasan_check_write+0x14/0x20 [ 60.674343][ T1359] ? mutex_lock+0x93/0x1b0 [ 60.678754][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 60.683605][ T1359] ? __fdget_pos+0x2cd/0x380 [ 60.688187][ T1359] ? ksys_read+0x70/0x260 [ 60.692506][ T1359] ksys_read+0x14a/0x260 [ 60.696746][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 60.701502][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 60.707131][ T1359] __x64_sys_read+0x7b/0x90 [ 60.711631][ T1359] x64_sys_call+0x2f/0x9a0 [ 60.716043][ T1359] do_syscall_64+0x4c/0xa0 [ 60.720452][ T1359] ? clear_bhb_loop+0x30/0x80 [ 60.725115][ T1359] ? clear_bhb_loop+0x30/0x80 [ 60.729795][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.735683][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 60.740091][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.760206][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.768609][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 60.776573][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 60.784585][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 60.792550][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.800626][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 60.808603][ T1359] [ 60.811620][ T1359] ---[ end trace 0000000000000000 ]--- [ 60.817845][ T1359] ------------[ cut here ]------------ [ 60.823348][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 60.833598][ T1359] Modules linked in: [ 60.837502][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 60.846248][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.856290][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 60.862095][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 60.881715][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 60.887859][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 60.895841][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 60.903802][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 60.911764][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 60.919726][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 60.927699][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.936700][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.943273][ T1359] CR2: 000055556657c4e8 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 60.951257][ T1359] Call Trace: [ 60.954533][ T1359] [ 60.957540][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 60.963170][ T1359] ? __kasan_check_write+0x14/0x20 [ 60.968369][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 60.973050][ T1359] rb_buffer_peek+0x5f/0x930 [ 60.977628][ T1359] ring_buffer_consume+0x1aa/0x370 [ 60.982737][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 60.988468][ T1359] ? print_trace_line+0x393/0x6b0 [ 60.993476][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 60.998401][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 61.003845][ T1359] vfs_read+0x286/0x930 [ 61.007987][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 61.012704][ T1359] ? __kasan_check_write+0x14/0x20 [ 61.017812][ T1359] ? mutex_lock+0x93/0x1b0 [ 61.022240][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 61.027129][ T1359] ? __fdget_pos+0x2cd/0x380 [ 61.031725][ T1359] ? ksys_read+0x70/0x260 [ 61.036049][ T1359] ksys_read+0x14a/0x260 [ 61.040283][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 61.045034][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 61.050660][ T1359] __x64_sys_read+0x7b/0x90 [ 61.055164][ T1359] x64_sys_call+0x2f/0x9a0 [ 61.059586][ T1359] do_syscall_64+0x4c/0xa0 [ 61.063991][ T1359] ? clear_bhb_loop+0x30/0x80 [ 61.068657][ T1359] ? clear_bhb_loop+0x30/0x80 [ 61.073320][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.079233][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 61.083655][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.103250][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.111826][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 61.119857][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 61.127831][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 61.135789][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.143772][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 61.151732][ T1359] [ 61.154735][ T1359] ---[ end trace 0000000000000000 ]--- [ 61.160209][ T1359] ------------[ cut here ]------------ [ 61.165670][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 61.176070][ T1359] Modules linked in: [ 61.179951][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 61.188703][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.198741][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 61.204537][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 61.224132][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 61.230190][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 61.238148][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.246117][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.254125][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 61.262214][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 61.270216][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.279143][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.285713][ T1359] CR2: 000055556657c4e8 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 61.293678][ T1359] Call Trace: [ 61.296960][ T1359] [ 61.299881][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 61.305509][ T1359] rb_advance_reader+0x2b/0x770 [ 61.310350][ T1359] ring_buffer_consume+0x1e7/0x370 [ 61.315538][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 61.321162][ T1359] ? print_trace_line+0x393/0x6b0 [ 61.326173][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 61.331124][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 61.336571][ T1359] vfs_read+0x286/0x930 [ 61.340731][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 61.345393][ T1359] ? __kasan_check_write+0x14/0x20 [ 61.350492][ T1359] ? mutex_lock+0x93/0x1b0 [ 61.354986][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 61.359828][ T1359] ? __fdget_pos+0x2cd/0x380 [ 61.364414][ T1359] ? ksys_read+0x70/0x260 [ 61.368732][ T1359] ksys_read+0x14a/0x260 [ 61.373047][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 61.377796][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 61.383430][ T1359] __x64_sys_read+0x7b/0x90 [ 61.387926][ T1359] x64_sys_call+0x2f/0x9a0 [ 61.392326][ T1359] do_syscall_64+0x4c/0xa0 [ 61.396739][ T1359] ? clear_bhb_loop+0x30/0x80 [ 61.401401][ T1359] ? clear_bhb_loop+0x30/0x80 [ 61.406078][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.411961][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 61.416363][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.435956][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.444370][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 61.452341][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 61.460300][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 61.468256][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.476209][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 61.484172][ T1359] [ 61.487193][ T1359] ---[ end trace 0000000000000000 ]--- [ 61.493371][ T1359] ------------[ cut here ]------------ [ 61.498843][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 61.509092][ T1359] Modules linked in: [ 61.512986][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 61.521738][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.531788][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 61.537596][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 61.557206][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 61.563273][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 61.571240][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.579217][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.587188][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 61.595181][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 61.603152][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.612081][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.618659][ T1359] CR2: 000055556657c4e8 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 61.626636][ T1359] Call Trace: [ 61.629937][ T1359] [ 61.632876][ T1359] ? __kasan_check_write+0x14/0x20 [ 61.638020][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 61.643662][ T1359] ? __kasan_check_write+0x14/0x20 [ 61.648800][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 61.653505][ T1359] rb_buffer_peek+0x5f/0x930 [ 61.658125][ T1359] ring_buffer_peek+0x184/0x3b0 [ 61.662988][ T1359] ? __kasan_check_read+0x11/0x20 [ 61.668013][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 61.673478][ T1359] ? _find_next_bit+0x8a/0x130 [ 61.678242][ T1359] __find_next_entry+0x33c/0x6c0 [ 61.683189][ T1359] ? trace_find_next_entry+0x380/0x380 [ 61.688654][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 61.694284][ T1359] ? print_trace_line+0x393/0x6b0 [ 61.699311][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 61.704250][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 61.709709][ T1359] vfs_read+0x286/0x930 [ 61.713861][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 61.718542][ T1359] ? __kasan_check_write+0x14/0x20 [ 61.723651][ T1359] ? mutex_lock+0x93/0x1b0 [ 61.728070][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 61.732924][ T1359] ? __fdget_pos+0x2cd/0x380 [ 61.737512][ T1359] ? ksys_read+0x70/0x260 [ 61.741840][ T1359] ksys_read+0x14a/0x260 [ 61.746081][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 61.750844][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 61.756475][ T1359] __x64_sys_read+0x7b/0x90 [ 61.760978][ T1359] x64_sys_call+0x2f/0x9a0 [ 61.765395][ T1359] do_syscall_64+0x4c/0xa0 [ 61.769814][ T1359] ? clear_bhb_loop+0x30/0x80 [ 61.774484][ T1359] ? clear_bhb_loop+0x30/0x80 [ 61.779157][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.785066][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 61.789511][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.809127][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 61.817545][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 61.825515][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 61.833487][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 61.841458][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.849427][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 61.857423][ T1359] [ 61.860437][ T1359] ---[ end trace 0000000000000000 ]--- [ 61.867141][ T1359] ------------[ cut here ]------------ [ 61.872623][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 61.882885][ T1359] Modules linked in: [ 61.886779][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 61.895532][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.905612][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 61.911684][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 61.931289][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 61.937356][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 61.945324][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 61.953293][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 61.961262][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 61.969235][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 61.977213][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.986171][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.992766][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 62.001532][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.009523][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.017512][ T1359] Call Trace: [ 62.020788][ T1359] [ 62.023719][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 62.029356][ T1359] ? __kasan_check_write+0x14/0x20 [ 62.034466][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 62.039141][ T1359] rb_buffer_peek+0x5f/0x930 [ 62.043731][ T1359] ring_buffer_consume+0x1aa/0x370 [ 62.048848][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 62.054481][ T1359] ? print_trace_line+0x393/0x6b0 [ 62.059507][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 62.064454][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 62.069919][ T1359] vfs_read+0x286/0x930 [ 62.074082][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 62.078759][ T1359] ? __kasan_check_write+0x14/0x20 [ 62.083876][ T1359] ? mutex_lock+0x93/0x1b0 [ 62.088308][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 62.093259][ T1359] ? __fdget_pos+0x2cd/0x380 [ 62.098025][ T1359] ? ksys_read+0x70/0x260 [ 62.102373][ T1359] ksys_read+0x14a/0x260 [ 62.106723][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 62.111496][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 62.117144][ T1359] __x64_sys_read+0x7b/0x90 [ 62.121648][ T1359] x64_sys_call+0x2f/0x9a0 [ 62.126077][ T1359] do_syscall_64+0x4c/0xa0 [ 62.130524][ T1359] ? clear_bhb_loop+0x30/0x80 [ 62.135208][ T1359] ? clear_bhb_loop+0x30/0x80 [ 62.140143][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.146047][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 62.150636][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.170427][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.178936][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 62.186910][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 62.194882][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 62.203461][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.211441][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 62.219426][ T1359] [ 62.222446][ T1359] ---[ end trace 0000000000000000 ]--- [ 62.227970][ T1359] ------------[ cut here ]------------ [ 62.233452][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 62.244140][ T1359] Modules linked in: [ 62.248035][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 62.256797][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.266854][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 62.272664][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 62.292271][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010002 [ 62.298340][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 62.306312][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 62.314283][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 62.322251][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 62.330220][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 62.338198][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.347142][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.353729][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 62.361714][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.369685][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.377654][ T1359] Call Trace: [ 62.380931][ T1359] [ 62.383863][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 62.389503][ T1359] rb_advance_reader+0x2b/0x770 [ 62.394351][ T1359] ring_buffer_consume+0x1e7/0x370 [ 62.399462][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 62.405098][ T1359] ? print_trace_line+0x393/0x6b0 [ 62.410381][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 62.415328][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 62.420790][ T1359] vfs_read+0x286/0x930 [ 62.424953][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 62.429625][ T1359] ? __kasan_check_write+0x14/0x20 [ 62.434733][ T1359] ? mutex_lock+0x93/0x1b0 [ 62.439151][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 62.444008][ T1359] ? __fdget_pos+0x2cd/0x380 [ 62.448601][ T1359] ? ksys_read+0x70/0x260 [ 62.452926][ T1359] ksys_read+0x14a/0x260 [ 62.457168][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 62.461931][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 62.467567][ T1359] __x64_sys_read+0x7b/0x90 [ 62.472505][ T1359] x64_sys_call+0x2f/0x9a0 [ 62.476933][ T1359] do_syscall_64+0x4c/0xa0 [ 62.481352][ T1359] ? clear_bhb_loop+0x30/0x80 [ 62.486056][ T1359] ? clear_bhb_loop+0x30/0x80 [ 62.490732][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.496628][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 62.501048][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.520655][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.529068][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 62.537036][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 62.545011][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 62.552982][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.560948][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 62.568919][ T1359] [ 62.571935][ T1359] ---[ end trace 0000000000000000 ]--- [ 62.578013][ T1359] ------------[ cut here ]------------ [ 62.583497][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 62.593736][ T1359] Modules linked in: [ 62.597639][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 62.606827][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.616868][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 62.622674][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 62.642285][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 62.648377][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 62.656381][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 62.664345][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 62.672307][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 62.680268][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 62.688235][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 62.697155][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.703814][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 62.711779][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.719746][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.727719][ T1359] Call Trace: [ 62.731007][ T1359] [ 62.733934][ T1359] ? __kasan_check_write+0x14/0x20 [ 62.739040][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 62.744666][ T1359] ? __kasan_check_write+0x14/0x20 [ 62.749785][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 62.754468][ T1359] rb_buffer_peek+0x5f/0x930 [ 62.759058][ T1359] ring_buffer_peek+0x184/0x3b0 [ 62.763917][ T1359] ? __kasan_check_read+0x11/0x20 [ 62.768939][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 62.774314][ T1359] ? _find_next_bit+0x8a/0x130 [ 62.779093][ T1359] __find_next_entry+0x33c/0x6c0 [ 62.784031][ T1359] ? trace_find_next_entry+0x380/0x380 [ 62.789491][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 62.795559][ T1359] ? print_trace_line+0x393/0x6b0 [ 62.800677][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 62.805609][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 62.811058][ T1359] vfs_read+0x286/0x930 [ 62.815203][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 62.819870][ T1359] ? __kasan_check_write+0x14/0x20 [ 62.825219][ T1359] ? mutex_lock+0x93/0x1b0 [ 62.829663][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 62.834522][ T1359] ? __fdget_pos+0x2cd/0x380 [ 62.839126][ T1359] ? ksys_read+0x70/0x260 [ 62.843479][ T1359] ksys_read+0x14a/0x260 [ 62.847725][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 62.852485][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 62.858140][ T1359] __x64_sys_read+0x7b/0x90 [ 62.862725][ T1359] x64_sys_call+0x2f/0x9a0 [ 62.867138][ T1359] do_syscall_64+0x4c/0xa0 [ 62.871572][ T1359] ? clear_bhb_loop+0x30/0x80 [ 62.876269][ T1359] ? clear_bhb_loop+0x30/0x80 [ 62.880933][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.886841][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 62.891260][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.910860][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.919268][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 62.927231][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 62.935203][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 62.943268][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.951238][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 62.959244][ T1359] [ 62.962261][ T1359] ---[ end trace 0000000000000000 ]--- [ 62.969511][ T1359] ------------[ cut here ]------------ [ 62.974990][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 62.985252][ T1359] Modules linked in: [ 62.989145][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 62.997906][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.007975][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 63.013791][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 63.033397][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 63.039467][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 63.047432][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.055397][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 63.063491][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 63.071465][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 63.079433][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.088428][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.095000][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 63.102964][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.110935][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.118900][ T1359] Call Trace: [ 63.122181][ T1359] [ 63.125134][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 63.130803][ T1359] ? __kasan_check_write+0x14/0x20 [ 63.135917][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 63.140598][ T1359] rb_buffer_peek+0x5f/0x930 [ 63.145189][ T1359] ring_buffer_consume+0x1aa/0x370 [ 63.150299][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 63.155941][ T1359] ? print_trace_line+0x393/0x6b0 [ 63.161785][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 63.166748][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 63.172206][ T1359] vfs_read+0x286/0x930 [ 63.176358][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 63.181038][ T1359] ? __kasan_check_write+0x14/0x20 [ 63.186151][ T1359] ? mutex_lock+0x93/0x1b0 [ 63.190576][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 63.195432][ T1359] ? __fdget_pos+0x2cd/0x380 [ 63.200042][ T1359] ? ksys_read+0x70/0x260 [ 63.204378][ T1359] ksys_read+0x14a/0x260 [ 63.208649][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 63.213411][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 63.219043][ T1359] __x64_sys_read+0x7b/0x90 [ 63.223545][ T1359] x64_sys_call+0x2f/0x9a0 [ 63.227970][ T1359] do_syscall_64+0x4c/0xa0 [ 63.232393][ T1359] ? clear_bhb_loop+0x30/0x80 [ 63.237158][ T1359] ? clear_bhb_loop+0x30/0x80 [ 63.241833][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.247731][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 63.252147][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.271755][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.280174][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 63.288157][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 63.296125][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 63.304093][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.312066][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 63.320039][ T1359] [ 63.323054][ T1359] ---[ end trace 0000000000000000 ]--- [ 63.328554][ T1359] ------------[ cut here ]------------ [ 63.334003][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 63.344246][ T1359] Modules linked in: [ 63.348139][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 63.357005][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.367061][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 63.372872][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 63.392496][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 63.398563][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 63.406711][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.414683][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 63.422666][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 63.430647][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 63.438709][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.447649][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.454232][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 63.462211][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.470190][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.478182][ T1359] Call Trace: [ 63.481467][ T1359] [ 63.484431][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 63.490077][ T1359] rb_advance_reader+0x2b/0x770 [ 63.494926][ T1359] ring_buffer_consume+0x1e7/0x370 [ 63.500035][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 63.505666][ T1359] ? print_trace_line+0x393/0x6b0 [ 63.510692][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 63.515632][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 63.521095][ T1359] vfs_read+0x286/0x930 [ 63.525249][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 63.529921][ T1359] ? __kasan_check_write+0x14/0x20 [ 63.535035][ T1359] ? mutex_lock+0x93/0x1b0 [ 63.539473][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 63.544328][ T1359] ? __fdget_pos+0x2cd/0x380 [ 63.548925][ T1359] ? ksys_read+0x70/0x260 [ 63.553253][ T1359] ksys_read+0x14a/0x260 [ 63.557516][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 63.562280][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 63.567912][ T1359] __x64_sys_read+0x7b/0x90 [ 63.572414][ T1359] x64_sys_call+0x2f/0x9a0 [ 63.576830][ T1359] do_syscall_64+0x4c/0xa0 [ 63.581248][ T1359] ? clear_bhb_loop+0x30/0x80 [ 63.585922][ T1359] ? clear_bhb_loop+0x30/0x80 [ 63.590601][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.596498][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 63.600909][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.620511][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.628922][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 63.636893][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 63.644861][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 63.652925][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.660891][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 63.668887][ T1359] [ 63.671904][ T1359] ---[ end trace 0000000000000000 ]--- [ 63.678076][ T1359] ------------[ cut here ]------------ [ 63.683550][ T1359] WARNING: CPU: 0 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 63.693819][ T1359] Modules linked in: [ 63.697709][ T1359] CPU: 0 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 63.706463][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.716513][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 63.722321][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 63.741928][ T1359] RSP: 0018:ffffc9000449f820 EFLAGS: 00010002 [ 63.747997][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 63.755969][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 63.764378][ T1359] RBP: ffffc9000449f990 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 63.772348][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 63.780321][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 63.788295][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 63.797224][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.803806][ T1359] CR2: 000055556657c4e8 CR3: 0000000141c08000 CR4: 00000000003506b0 [ 63.811779][ T1359] Call Trace: [ 63.815056][ T1359] [ 63.817985][ T1359] ? __kasan_check_write+0x14/0x20 [ 63.823095][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 63.828743][ T1359] ? __kasan_check_write+0x14/0x20 [ 63.833878][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 63.838576][ T1359] rb_buffer_peek+0x5f/0x930 [ 63.843177][ T1359] ring_buffer_peek+0x184/0x3b0 [ 63.848024][ T1359] ? __kasan_check_read+0x11/0x20 [ 63.853051][ T1359] ? __cfi_ring_buffer_peek+0x10/0x10 [ 63.858427][ T1359] ? _find_next_bit+0x8a/0x130 [ 63.863198][ T1359] __find_next_entry+0x33c/0x6c0 [ 63.868143][ T1359] ? trace_find_next_entry+0x380/0x380 [ 63.873604][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 63.879255][ T1359] ? print_trace_line+0x393/0x6b0 [ 63.884282][ T1359] tracing_read_pipe+0x3d2/0xaf0 [ 63.889228][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 63.894688][ T1359] vfs_read+0x286/0x930 [ 63.898843][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 63.903524][ T1359] ? __kasan_check_write+0x14/0x20 [ 63.908636][ T1359] ? mutex_lock+0x93/0x1b0 [ 63.913058][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 63.917913][ T1359] ? __fdget_pos+0x2cd/0x380 [ 63.922504][ T1359] ? ksys_read+0x70/0x260 [ 63.926836][ T1359] ksys_read+0x14a/0x260 [ 63.931077][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 63.935838][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 63.941471][ T1359] __x64_sys_read+0x7b/0x90 [ 63.945972][ T1359] x64_sys_call+0x2f/0x9a0 [ 63.950388][ T1359] do_syscall_64+0x4c/0xa0 [ 63.954824][ T1359] ? clear_bhb_loop+0x30/0x80 [ 63.959511][ T1359] ? clear_bhb_loop+0x30/0x80 [ 63.964347][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.970315][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 63.974739][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.994348][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.002856][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 64.011009][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 64.018985][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 64.027046][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.035019][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 64.043084][ T1359] [ 64.046102][ T1359] ---[ end trace 0000000000000000 ]--- [ 64.052487][ T1359] ------------[ cut here ]------------ [ 64.057969][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 64.068334][ T1359] Modules linked in: [ 64.072260][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 64.081006][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.091051][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 64.096852][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 64.116448][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010002 [ 64.122513][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 64.130612][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 64.138591][ T1359] RBP: ffffc9000449fab0 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 64.146581][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 64.154540][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 64.162590][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.171509][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.178091][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 64.186058][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.194107][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.202077][ T1359] Call Trace: [ 64.205351][ T1359] [ 64.208274][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 64.213920][ T1359] ? __kasan_check_write+0x14/0x20 [ 64.219033][ T1359] ? _raw_spin_lock+0x94/0xf0 [ 64.223723][ T1359] rb_buffer_peek+0x5f/0x930 [ 64.228394][ T1359] ring_buffer_consume+0x1aa/0x370 [ 64.233497][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 64.239122][ T1359] ? print_trace_line+0x393/0x6b0 [ 64.244149][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 64.249089][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 64.254537][ T1359] vfs_read+0x286/0x930 [ 64.258681][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 64.263345][ T1359] ? __kasan_check_write+0x14/0x20 [ 64.268469][ T1359] ? mutex_lock+0x93/0x1b0 [ 64.272884][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 64.277741][ T1359] ? __fdget_pos+0x2cd/0x380 [ 64.282321][ T1359] ? ksys_read+0x70/0x260 [ 64.286644][ T1359] ksys_read+0x14a/0x260 [ 64.290874][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 64.295627][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 64.301250][ T1359] __x64_sys_read+0x7b/0x90 [ 64.305744][ T1359] x64_sys_call+0x2f/0x9a0 [ 64.310149][ T1359] do_syscall_64+0x4c/0xa0 [ 64.314557][ T1359] ? clear_bhb_loop+0x30/0x80 [ 64.319219][ T1359] ? clear_bhb_loop+0x30/0x80 [ 64.323885][ T1359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.330116][ T1359] RIP: 0033:0x7fa28eb9e0d9 [ 64.334533][ T1359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.354316][ T1359] RSP: 002b:00007fa28fa14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.362893][ T1359] RAX: ffffffffffffffda RBX: 00007fa28ee26090 RCX: 00007fa28eb9e0d9 [ 64.370858][ T1359] RDX: 0000000000002000 RSI: 0000200000001000 RDI: 0000000000000005 [ 64.378819][ T1359] RBP: 00007fa28ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 64.386781][ T1359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.394845][ T1359] R13: 00007fa28ee26128 R14: 00007fa28ee26090 R15: 00007fff50d235b8 [ 64.402811][ T1359] [ 64.405844][ T1359] ---[ end trace 0000000000000000 ]--- [ 64.411336][ T1359] ------------[ cut here ]------------ [ 64.416790][ T1359] WARNING: CPU: 1 PID: 1359 at kernel/trace/ring_buffer.c:4772 rb_get_reader_page+0xada/0xc60 [ 64.427022][ T1359] Modules linked in: [ 64.430997][ T1359] CPU: 1 PID: 1359 Comm: syz.2.289 Tainted: G B W syzkaller #0 [ 64.439747][ T1359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.449875][ T1359] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 64.455672][ T1359] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 6f 2d 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 fa 2f 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 93 a2 fd ff e9 13 fe [ 64.475274][ T1359] RSP: 0018:ffffc9000449f940 EFLAGS: 00010006 [ 64.481336][ T1359] RAX: 1ffff1102002ec01 RBX: ffff888100052600 RCX: ffffffff8173c396 [ 64.489320][ T1359] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 64.497386][ T1359] RBP: ffffc9000449fab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 64.505346][ T1359] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 64.513306][ T1359] R13: 1ffff11020073fe6 R14: 1ffff11020073fe3 R15: 0000000000000ff0 [ 64.521267][ T1359] FS: 00007fa28fa146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.530184][ T1359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.536770][ T1359] CR2: 000056317c038e78 CR3: 0000000141c08000 CR4: 00000000003506a0 [ 64.544734][ T1359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.552709][ T1359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.560672][ T1359] Call Trace: [ 64.563967][ T1359] [ 64.566892][ T1359] ? ring_buffer_read_page+0x1260/0x1260 [ 64.572522][ T1359] rb_advance_reader+0x2b/0x770 [ 64.577361][ T1359] ring_buffer_consume+0x1e7/0x370 [ 64.582459][ T1359] ? __cfi_ring_buffer_consume+0x10/0x10 [ 64.588077][ T1359] ? print_trace_line+0x393/0x6b0 [ 64.593189][ T1359] tracing_read_pipe+0x5b3/0xaf0 [ 64.598135][ T1359] ? __cfi_tracing_read_pipe+0x10/0x10 [ 64.603583][ T1359] vfs_read+0x286/0x930 [ 64.607729][ T1359] ? __cfi_vfs_read+0x10/0x10 [ 64.612391][ T1359] ? __kasan_check_write+0x14/0x20 [ 64.617488][ T1359] ? mutex_lock+0x93/0x1b0 [ 64.621903][ T1359] ? __cfi_mutex_lock+0x10/0x10 [ 64.626750][ T1359] ? __fdget_pos+0x2cd/0x380 [ 64.631534][ T1359] ? ksys_read+0x70/0x260 [ 64.636656][ T1359] ksys_read+0x14a/0x260 [ 64.640909][ T1359] ? __cfi_ksys_read+0x10/0x10 [ 64.645789][ T1359] ? fpregs_restore_userregs+0x128/0x260 [ 64.651429][ T1359] __x64_sys_read+0x7b/0x90 [ 64.655927][ T1359] x64_sys_call+0x2f/0x9a0 [ 64.660354][ T1359] do_syscall_64+0x4c/0xa0 [ 64.664763][ T1359] ? clear_bhb_loop+0x30/0x80